Lucene search

K
joomlaOpen Source Matters, Inc.JOOMLA-884
HistoryAug 27, 2022 - 12:00 a.m.

[20220801] - Core - Multiple Full Path Disclosures because of missing '_JEXEC or die check'

2022-08-2700:00:00
Open Source Matters, Inc.
developer.joomla.org
21
joomla
full path disclosure
security vulnerability

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

47.1%

Joomla! CMS versions 4.2.0

Affected configurations

Vulners
Node
joomlajoomla\!Range<4.2.1
VendorProductVersionCPE
joomlajoomla\!*cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

47.1%