PT-2025-4389 · Joomla · Admiror Gallery

Published 2025-02-04 · Updated 2025-06-04 · CVE-2025-22205

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Admiror Gallery extension for Joomla version branch 4.x

Description The issue arises from improper handling of input variables, leading to multiple path traversal vulnerabilities. This allows unauthorized access to sensitive files and directories.

Recommendations For version branch 4.x, update to a version that properly sanitizes and validates input variables to prevent path traversal attacks. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

CWE-35

Related Identifiers

CVE-2025-22205

Affected Products

Admiror Gallery

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-22205 · Security Note
• https://osv.dev/vulnerability/CVE-2025-22205 · Vendor Advisory
• https://twitter.com/CVEnew/status/1886680216946524662 · Twitter Post
• https://t.me/cvenotify/124670 · Telegram Post
• https://t.me/cvedetector/17161 · Telegram Post
• http://admiror-design-studio.com/admiror-joomla-extensions/admiror-gallery · Note
• https://t.me/cvenotify/110149 · Telegram Post