Unrated
In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure.
CVE-2019-19845
First seen on SecPulse
References
- advisory developer.joomla.org