PT-2022-18687 · Joomla · Joomla!

Peter Martin · Published 2022-10-25 · Updated 2025-04-03 · CVE-2022-27912

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Joomla! versions 4.0.0 through 4.2.3

Description An issue was discovered in Joomla! where sites with publicly enabled debug mode exposed data of previous requests.

Recommendations For Joomla! versions 4.0.0 through 4.2.3, disable the publicly enabled debug mode to prevent exposure of previous request data.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BIT-JOOMLA-2022-27912

CVE-2022-27912

Affected Products

Joomla!

References · 6

• https://developer.joomla.org/security-centre/885-20221001-core-disclosure-of-critical-information-in-debug-mode.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27912 · Security Note
• https://osv.dev/vulnerability/BIT-joomla-2022-27912 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-27912 · Vendor Advisory
• https://t.me/cvenotify/61978 · Telegram Post
• https://t.me/cibsecurity/52066 · Telegram Post