
Cloud Vulnerability DB
A community-led vulnerabilities database
The vulnerability CVE-2022-27911 is a Path Disclosure vulnerability affecting Joomla! CMS version 4.2.0. The issue was discovered on August 27, 2022, and was fixed on August 30, 2022, with the release of version 4.2.1. This vulnerability was caused by multiple Full Path Disclosures due to missing '_JEXEC or die check' implementations, which emerged as a result of PSR12 changes introduced in version 4.2.0 (Joomla Security).
The vulnerability is classified as having Low severity and Low probability. The specific issue involves path disclosure vulnerabilities resulting from missing '_JEXEC or die check' implementations. This security flaw emerged following PSR12 changes that were implemented in Joomla! version 4.2.0 (Joomla Security).
The impact of this vulnerability is considered Low. It could potentially lead to the disclosure of full system paths, which might provide attackers with information about the server's directory structure (Joomla Security).
The vulnerability was patched in Joomla! version 4.2.1. Users running affected versions (4.2.0) are advised to upgrade to version 4.2.1 to mitigate this security issue. The fix was implemented through public tracker issue #38615 (Joomla Security).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."