Skip to content
OpenAdvisories
High · 8.9 CVE-2026-117543 EUVD-2026-124602GHSA-2934-3v6j-mx9x

Joomla Extension - jdownloads.com - SSRF via external download URL field jDownloads < 4.1.8

Published Nov 12, 2026 · Updated Nov 13, 2026 · Assigned by Joomla

Description

Joomla Extension - jdownloads.com - SSRF via external download URL field jDownloads < 4.1.8 - HTTP redirects when retrieving external download URLs could bypass validation of the original destination. This allowed server-side requests to internal or otherwise prohibited destinations and disclosure of their responses (SSRF).

Affected products

VendorProductAffectedFixed
jdownloads.com jDownloads extension for Joomla 1.0.0-4.1.7 —

References