CyberRota Analysis
AI-GeneratedThe JoomGallery extension prior to version 4.4.1 is vulnerable to unauthenticated arbitrary file uploads through the TUS endpoint, allowing attackers to upload files without authentication. While the ability to execute code is contingent on non-standard server configurations, this vulnerability poses a medium risk that could lead to further exploitation. Joomla administrators and web application security teams should prioritize addressing this issue to mitigate potential risks associated with unauthorized file uploads.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.1 - The TUS endpoint allows arbitrary file uploads, however neither file name nor file extension are under attacker control. Code execution requires non-standard server configuration.