An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability.CreditsDoyensec in collaboration with Claude and Anthropic ResearchReferenceshttps://developer.joomla.org/security-centre/1042-20260510-core-path-traversal-in-com-media-webservice-endpoint.html
