CVE-2022-23794

[20220302] - Core - Path Disclosure within filesystem error messages

published March 30, 2022

CVSS
—
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length causes the error. This error brings up the screen with the path of the source code of the web application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00924 · 60.1th percentile
Published
2022-03-30T15:20Z
EPSS history
Timeline
  • 30 MAR 15:20Z
    [20220302] - Core - Path Disclosure within filesystem error messages
    cvelistv5