[20201102] - Core - Disclosure of secrets in Global Configur…(CVE-2020-35611)

概要

[20201102] - Core - Disclosure of secrets in Global Configuration page

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An issue was discovered in Joomla! 2.5.0 through 3.9.22. The globlal configuration page does not remove secrets from the HTML output, disclosing the current values.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami joomla

[{"type":"SEMVER","events":[{"introduced":"2.5.0"},{"last_affected":"3.9.22"}]}]

参照URL

advisory developer.joomla.org
web nvd.nist.gov