CVE-2022-27911
Joomla vulnerability analysis and mitigation

Overview

The vulnerability CVE-2022-27911 is a Path Disclosure vulnerability affecting Joomla! CMS version 4.2.0. The issue was discovered on August 27, 2022, and was fixed on August 30, 2022, with the release of version 4.2.1. This vulnerability was caused by multiple Full Path Disclosures due to missing '_JEXEC or die check' implementations, which emerged as a result of PSR12 changes introduced in version 4.2.0 (Joomla Security).

Technical details

The vulnerability is classified as having Low severity and Low probability. The specific issue involves path disclosure vulnerabilities resulting from missing '_JEXEC or die check' implementations. This security flaw emerged following PSR12 changes that were implemented in Joomla! version 4.2.0 (Joomla Security).

Impact

The impact of this vulnerability is considered Low. It could potentially lead to the disclosure of full system paths, which might provide attackers with information about the server's directory structure (Joomla Security).

Mitigation and workarounds

The vulnerability was patched in Joomla! version 4.2.1. Users running affected versions (4.2.0) are advised to upgrade to version 4.2.1 to mitigate this security issue. The fix was implemented through public tracker issue #38615 (Joomla Security).

Additional resources


SourceThis report was generated using AI

Related Joomla vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-25226CRITICAL9.8
  • PHPPHP
  • cpe:2.3:a:joomla:joomla\!
NoYesApr 08, 2025
CVE-2025-25227HIGH7.5
  • PHPPHP
  • cpe:2.3:a:joomla:joomla\!
NoYesApr 08, 2025
CVE-2025-22213HIGH7.1
  • JoomlaJoomla
  • cpe:2.3:a:joomla:joomla\!
NoNoMar 11, 2025
CVE-2025-54477MEDIUM5.3
  • JoomlaJoomla
  • cpe:2.3:a:joomla:joomla\!
NoNoSep 30, 2025
CVE-2025-54476MEDIUM4.8
  • PHPPHP
  • joomla/filter
NoYesSep 30, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management