The vulnerability arises from improper validation of the search parameter in the com_media files API endpoint, enabling an attacker to supply a crafted URL that traverses the filesystem hierarchy. By manipulating the search query with ../ sequences, a request can be constructed to read arbitrary files on the server. This allows exposure of confidential data such as configuration files, credentials, or source code, leading to significant information disclosure.

All installations of Joomla! CMS distributed by the Joomla! Project are potentially impacted. The CVE does not list specific affected version ranges, so any deployment that has not applied a yet‑unreleased patch may be vulnerable. Users should verify that their Joomla! version is up‑to‑date and that the com_media webservice is properly secured.

The CVSS score of 5.9 indicates moderate severity. EPSS data is not available, so the likelihood of exploitation cannot be quantified, and the vulnerability is not currently included in the CISA KEV catalog. The attack vector is inferred to be an unauthenticated HTTP request to the com_media API, where an attacker crafts the search parameter to perform a path traversal. Successful exploitation would provide read access to files outside the intended media directory, potentially exposing sensitive data.