An improper access check in Joomla! CMS's com_media webservice endpoints lets a logged‑in privileged user overwrite media files without the editorial permission normally required. This flaw is an instance of improper authorization (CWE‑284), allowing a privileged account to replace site media assets.

The vulnerability impacts Joomla! CMS released by the Joomla! Project. Versions prior to the patch that contain the unpatched com_media webservice endpoints are potentially affected, as no specific version range is provided.

The CVSS score of 6.4 classifies this as medium severity. The EPSS score of <1% indicates a very low probability of exploitation, not listed in CISA KEV. Exploitation requires an authenticated privileged account and the use of the webservice to overwrite media files. Because of the authentication prerequisite, the risk scope remains limited to users with elevated privileges.