The vulnerability arises from insecure path handling in the CDN versioning feature of the Joomla Pro extension. When a request includes a path that references outside the site root, the CDN checks for file existence and collects modification metadata, which can be accessed by an attacker. This is a CWE‑22 path traversal condition that exposes local file existence and modification timestamps, providing information that could be useful for further attacks. The resulting information about which files exist and their modification times is exposed, allowing an attacker to gain file system insight without requiring authentication.

The affected product is the CDN for Joomla Pro extension by regularlabs.com, integrated into Joomla sites. No specific version numbers are available in the CVE record, so any site using the current CDN version is potentially impacted, especially if the plugin is not updated to a patched release.

The CVSS score of 6.2 indicates a moderate risk, and the EPSS score of less than 1% suggests a very low probability of exploitation as of now. The vulnerability is not listed in the CISA KEV catalog, and there is no public evidence of active exploitation. Exploitation would require an attacker to craft requests to the versioning endpoint of the CDN, which is likely accessible via the web. The attack would yield only file existence and timestamp information, not remote code execution. However, once an attacker gains knowledge of file locations, subsequent exploitation of other weaknesses may become easier.