Critical severity9.8OSV Advisory· Published Apr 10, 2019· Updated Jun 17, 2026

CVE-2019-10945

Description

An issue was discovered in Joomla! before 3.9.5. The Media Manager component does not properly sanitize the folder parameter, allowing attackers to act outside the media manager root directory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Joomla/Joomla!OSV3 versions
1.7.3, 2.5.0, 2.5.0_beta1, …+ 2 more
- (no CPE)range: 1.7.3, 2.5.0, 2.5.0_beta1, …
- cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*range: >=1.5.0,<=3.9.4
- (no CPE)range: <3.9.5

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/152515/Joomla-3.9.4-Arbitrary-File-Deletion-Directory-Traversal.htmlnvdExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/46710/nvdExploitThird Party AdvisoryVDB Entry
developer.joomla.org/security-centre/777-20190401-core-directory-traversal-in-com-medianvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.030
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000