CVE-2019-9922

CVE-2019-9922 is a directory traversal vulnerability affecting the Harmis JE Messenger component 1.2.2 for Joomla!, allowing unauthorized read access to arbitrary files on the server. With a CVSS score of 7.5 (HIGH), this vulnerability is easily exploitable over the network with low attack complexity and no user interaction, leading to high confidentiality impact. While not listed in CISA's KEV catalog, a Nuclei template exists for detection, indicating potential for exploitation. Despite its high EPSS score and FAUCET Risk Score, there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.