CVE-2025-27445 — Extension - rsjoomla.com - A path traversal vulnerability RSFirewall component 2.9.7 - 3.1.5 for Joomla

CVE-2025-27445

Extension - rsjoomla.com - A path traversal vulnerability RSFirewall component 2.9.7 - 3.1.5 for Joomla PUBLISHED

Description (CNA)

A path traversal vulnerability in RSFirewall component 2.9.7 - 3.1.5 for Joomla was discovered. This vulnerability allows authenticated users to read arbitrary files outside the Joomla root directory. The flaw is caused by insufficient sanitization of user-supplied input in file path parameters, allowing attackers to exploit directory traversal sequences (e.g., ../) to access sensitive files

Affected (CNA)

Vendor / product	Versions
rsjoomla.com / RSFirewall component for Joomla	affected 2.9.7-3.1.5

CWE

CWE-35

References

https://rsjoomla.com/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.