CVE-2020-35611

[20201102] - Core - Disclosure of secrets in Global Configuration page

published December 28, 2020

CVSS
—
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

An issue was discovered in Joomla! 2.5.0 through 3.9.22. The globlal configuration page does not remove secrets from the HTML output, disclosing the current values.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01346 · 71.2th percentile
Published
2020-12-28T19:39Z
EPSS history
Timeline
  • 28 DEC 19:39Z
    [20201102] - Core - Disclosure of secrets in Global Configuration page
    cvelistv5