Lucene search
K

4 matches found

Github Security Blog
Github Security Blog
added 2022/03/31 12:0 a.m.13 views

Path Disclosure within joomla/filesystem class

An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length causes the error. This error brings up the screen with the path of the source code of the web application...

5.3CVSS6.9AI score0.00006EPSS
Exploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/03/31 12:0 a.m.51 views

Joomla! 4.x < 4.1.1 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.10.7 or 4.x prior to 4.1.1. It is, therefore, affected by multiple vulnerabilities. - Extracting an specifilcy crafted tar package could write files outside of the intended path...

9.8CVSS7.2AI score0.00818EPSS
Exploits3References18
Tenable Nessus
Tenable Nessus
added 2022/03/31 12:0 a.m.76 views

Joomla! 2.5.x < 3.10.7 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.10.7 or 4.x prior to 4.1.1. It is, therefore, affected by multiple vulnerabilities. - Extracting an specifilcy crafted tar package could write files outside of the intended path...

9.8CVSS7.2AI score0.00818EPSS
Exploits3References16
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
added 2021/02/17 12:0 a.m.32 views

[20220302] - Core - Path Disclosure within filesystem error messages

Uploading a file name of an excess length causes the error. This error brings up the screen with the path of the source code of the web application...

5.3CVSS1AI score0.00006EPSS
Exploits0Affected Software1
Rows per page
Query Builder