[20220302] - Core - Path Disclosure within filesystem error… (CVE-2022-23794)

Résumé

[20220302] - Core - Path Disclosure within filesystem error messages

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length causes the error. This error brings up the screen with the path of the source code of the web application.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami joomla

[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"last_affected":"3.10.6"},{"introduced":"4.0.0"},{"last_affected":"4.1.0"}]}]

Références

advisory developer.joomla.org
web nvd.nist.gov