CVE-2018-7482 Path traversal in n/a
An attacker can exploit a path traversal vulnerability in the K2 component to download arbitrary files, including sensitive configuration data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-7482?
CVE-2018-7482 is a high-severity path traversal vulnerability in n/a, published on 28 Feb 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The K2 component 2.8.0 for Joomla! has Incorrect Access Control with directory traversal, allowing an attacker to download arbitrary files, as demonstrated by a view=media&task=connector&cmd=file&target=l1_../configuration.php&download=1 request. The specific pathname ../configuration.php should be base64 encoded for a valid attack. NOTE: the vendor disputes this issue because only files under the media-manager path can be downloaded, and the documentation indicates that sensitive information does not belong there. Nonetheless, 2.8.1 has additional blocking of .php downloads
Weakness: CWE-22
Which versions are affected by CVE-2018-7482?
It affects 1 product.
Products include Joomlaworks K2.
How do I fix CVE-2018-7482?
No fix has been published for CVE-2018-7482 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2018-7482 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2018-7482 exists.
Other vulnerabilities in n/a
- CVE-2019-19634 class.upload.php in verot.net omits .pht from the set of dangerous file extensions
- CVE-2019-19576 Remote code execution in verot/class.upload.php
- CVE-2026-48941 Joomla Extension - getk2.org - Unauthenticated folder delete in K2 extension for Joomla < 2.26
- CVE-2026-48943 Joomla Extension - getk2.org - Authenticated user property mass-assignment in K2 extension for Joomla < 2.26
- CVE-2026-48944 Joomla Extension - getk2.org - Exposure of sensitive files via attachment copy in K2 extension for Joomla < 2.26
Sources
Also known as GHSA-m84g-f3gh-gjxg.