Joomla Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2020-35612 - Vulnerability Database
Joomla Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2020-35612
High
Reference:
CVE-2020-35612
Title:
Joomla Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Overview:
An issue was discovered in Joomla 2.5.0 through 3.9.22. The folder parameter of mod_random_image lacked input validation leading to a path traversal vulnerability.