Joomla! 4.0.0-4.2.3 Debug Mode Exposes Prior Request Data
CVE-2022-27912 Published on October 25, 2022

[20221001] - Core - Debug Mode leaks full request payloads including passwords
An issue was discovered in Joomla! 4.0.0 through 4.2.3. Sites with publicly enabled debug mode exposed data of previous requests.

Vendor Advisory NVD


Products Associated with CVE-2022-27912

Want to know whenever a new CVE is published for Joomla? stack.watch will email you.

Joomla
 

Affected Versions

Joomla! Project Joomla! CMS Version 4.0.0-4.2.3 is affected by CVE-2022-27912

Exploit Probability

EPSS
0.01%
Percentile
0.40%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.