CVE-2025-27445 | BDVDB-2026-281155 Detail

Description#

A path traversal vulnerability in RSFirewall component 2.9.7 - 3.1.5 for Joomla was discovered. This vulnerability allows authenticated users to read arbitrary files outside the Joomla root directory. The flaw is caused by insufficient sanitization of user-supplied input in file path parameters, allowing attackers to exploit directory traversal sequences (e.g., ../) to access sensitive files

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-06-05Record published in the CVE List.
2. Version 22025-06-19Most recent update recorded in the CVE List.