Description
Sucuri reported a vulnerability in Akeeba Backup for Joomla! that could allow an attacker to list and download backups created with the Akeeba extension. This vulnerability is present on Joomla websites running Akeeba that have the "Enable front-end and remote backup" option activated.
Remediation
Upgrade to the latest version of Akeeba Backup for Joomla!.
References
Related Vulnerabilities
Drupal Core 9.3.x Security Bypass (9.3.0 - 9.3.5)
WordPress Plugin Wbcom Designs-BuddyPress Group Reviews Security Bypass (2.8.3)
WordPress Plugin SecuPress Pro Security Bypass (1.4.12)
WordPress Plugin WP Human Resource Management Security Bypass (2.2.5)
WordPress Plugin YITH WooCommerce Stripe Security Bypass (2.0.1)