medium6.3
CVE-2026-84048
Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.2 - The TUS endpoint allows arbitra…
Impact
Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.2 - The TUS endpoint allows arbitrary file uploads, however neither file name nor file extension are under attacker control. Code execution requires non-standard server configuration.
Affected products
| Product | Affected versions |
|---|---|
| JoomGallery | before 4.4.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.