CVE-2026-84048mediumCWE-284

CVE-2026-84048: falha de média gravidade em joomgalleryfriends.net JoomGallery extension…

Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.2

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar JoomGallery extension for Joomla

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.5%
Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.2 - The TUS endpoint allows arbitrary file uploads, however neither file name nor file extension are under attacker control. Code execution requires non-standard server configuration.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:A
Produtos afetados
joomgalleryfriends.net · JoomGallery extension for Joomla
CVEs relacionadas — joomgalleryfriends.net JoomGallery extension…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-66917HIGHJoomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0EPSS 0.5%CVE-2026-66916MEDIUMJoomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0EPSS 0.4%