CVE-2022-27911 [20220801] - Core - Multiple Full Path Disclosures because of missing '_JEXEC or die check'

2022-08-3110:00:14

Joomla

www.cve.org

joomla

full path disclosures

psr12

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

47.1%

JSON

An issue was discovered in Joomla! 4.2.0. Multiple Full Path Disclosures because of missing ‘_JEXEC or die check’ caused by the PSR12 changes.

CNA Affected

[
  {
    "product": "Joomla! CMS",
    "vendor": "Joomla! Project",
    "versions": [
      {
        "status": "affected",
        "version": "4.2.0"
      }
    ]
  }
]

References

developer.joomla.org/security-centre/884-20220801-core-multiple-full-path-disclosures-because-of-missing-jexec-or-die-check.html