[20220302] - Core - Path Disclosure within filesystem error… (CVE-2022-23794)

Summary

[20220302] - Core - Path Disclosure within filesystem error messages

Original description

The description as published by the source.

An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length causes the error. This error brings up the screen with the path of the source code of the web application.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami joomla

[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"last_affected":"3.10.6"},{"introduced":"4.0.0"},{"last_affected":"4.1.0"}]}]

References

advisory developer.joomla.org
web nvd.nist.gov