CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
What the vulnerability does
Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0 - An unauthenticated attacker can create arbitrary directories and files with a predefined name.
Explanation of Vulnerability in Simple Terms
SP Page Builder for Joomla contains a path traversal vulnerability that allows an attacker to read files outside the intended directory. The vulnerability requires specific attack conditions to exploit. Affected versions are 1.0.0 through 6.7.1. Site administrators should update to a version newer than 6.7.1 when available.
What an attacker can do
Read files outside the intended directory on the server.
Potential impact on your site
Sensitive files on your server may be exposed to unauthorized access.
Conditions required to exploit
Network access to the Joomla site; no authentication required.
Key dates
External resources
Related vulnerabilities
