CVE-2020-35612

Publication date

2020-12-28 19:39:18

Family

Joomla

State

PUBLISHED

Description

An issue was discovered in Joomla! 2.5.0 through 3.9.22. The folder parameter of mod_random_image lacked input validation, leading to a path traversal vulnerability.