CVE-2020-37219
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
May 13, 2026
Vendor
unknown
Description
Joomla com_fabrik 3.9.11 contains a directory traversal vulnerability that allows unauthenticated attackers to list arbitrary files by manipulating the folder parameter. Attackers can send GET requests to the onAjax_files method with path traversal sequences to enumerate files in system directories outside the intended web root.