Description
Joomla Extension - jdownloads.com - IDOR allowing restricted file downloads in jDownloads < 4.1.8 - The `other_file_id` parameter could reference another download’s file without fully enforcing the target download’s access restrictions. This allowed files to be delivered to users who were not authorised to access the target download.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| jdownloads.com | jDownloads extension for Joomla | 1.0.0-4.1.7 | — |
References
- https://www.jdownloads.com/ product