{"affected":[{"defaultStatus":"unaffected","product":"jDownloads extension for Joomla","source":"CNA: Joomla","vendor":"jdownloads.com","versions":[{"status":"affected","version":"1.0.0-4.1.7"}]}],"cveId":"CVE-2026-117543","cwes":["CWE-918"],"description":"Joomla Extension - jdownloads.com - SSRF via external download URL field jDownloads < 4.1.8 -  HTTP redirects when retrieving external download URLs could bypass validation of the original destination. This allowed server-side requests to internal or otherwise prohibited destinations and disclosure of their responses (SSRF).","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.9,"severity":"high","source":"CNA: Joomla","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","version":"4.0"}],"modifiedAt":1794506253299,"publishedAt":1794506253299,"references":[{"source":"CNA: Joomla","tags":["product"],"url":"https://www.jdownloads.com/"}],"remediation":[],"revision":"a6119d782f422418be278e21828dde08aa28f184546859b3e7d25ee0dc22c0f8","sources":[{"modifiedAt":1794506253299,"name":"CNA: Joomla","retrievedAt":1794506928572,"url":"https://www.cve.org/CVERecord?id=CVE-2026-117543"}],"ssvc":null,"status":"published","title":"Joomla Extension - jdownloads.com - SSRF via external download URL field jDownloads < 4.1.8","updatedAt":1794506928572}