Lucene search

JoomlaCVELIST:CVE-2022-27912

HistoryOct 25, 2022 - 12:00 a.m.

CVE-2022-27912 [20221001] - Core - Debug Mode leaks full request payloads including passwords

2022-10-2500:00:00

Joomla

www.cve.org

joomla

debug mode

data leak

cve-2022-27912

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.1%

JSON

An issue was discovered in Joomla! 4.0.0 through 4.2.3. Sites with publicly enabled debug mode exposed data of previous requests.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Joomla! CMS",
    "vendor": "Joomla! Project",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.0-4.2.3"
      }
    ]
  }
]

References

developer.joomla.org/security-centre/885-20221001-core-disclosure-of-critical-information-in-debug-mode.html