Vulnerability Bulletins

CVE-2026-117543

   
Affected software JOOMLA
 
Joomla Extension - jdownloads.com - SSRF via external download URL field jDownloads < 4.1.8 - HTTP redirects when retrieving external download URLs could bypass validation of the original destination. This allowed server-side requests to internal or otherwise prohibited destinations and disclosure of their responses (SSRF).

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-117543