MEDIUM

CVE-2026-48941

Joomlaworks K2 2026-06-25 CVSS v3.1

CVSS

6.5

Description

The K2 frontend `item.checkin` task accepts an unauthenticated `sigProFolder` query parameter and uses it directly to address a `JFolder::delete()` call under `/media/k2/galleries/`

Summary dbcve.org

An unauthenticated path traversal vulnerability in K2's frontend item.checkin task allows deletion of arbitrary folders via an unsanitized sigProFolder query parameter that is directly passed to JFolder::delete() under /media/k2/galleries/.

Mitigation

Apply vendor patch when available; until then, restrict access to the item.checkin task or deploy WAF rules to block directory traversal patterns in the sigProFolder parameter.

Weakness (CWE)

CWE-862 Missing Authorization

EPSS Score

0.27%

Probability of exploitation in next 30 days

18.8th percentile

References

https://www.getk2.org/ Product

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE