Description

Joomla! Core is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. Joomla! Core version 4.2.0 is vulnerable.

Remediation

Update to Joomla! Core version 4.2.1 or latest

References

https://github.com/joomla/joomla-cms/pull/38615

https://developer.joomla.org/security-centre/884-20220801-core-multiple-full-path-disclosures-because-of-missing-jexec-or-die-check.html

Related Vulnerabilities

WordPress Plugin Spellchecker 'general.php' Local and Remote File Include Vulnerabilities (3.1)

WordPress Plugin Fast Secure Contact Form Cross-Site Scripting (4.0.35)

Joomla! Core 3.9.x Cross-Site Scripting (3.9.0 - 3.9.20)

WordPress Plugin WordPress Related Posts Cross-Site Request Forgery (2.6.1)

Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-5539)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Information Disclosure CWE-200 CVE-2022-27911