BIT-joomla-2022-27912

vendorUSosv

[20221001] - Core - Debug Mode leaks full request payloads including passwords

view advisory published 2025-04-03Licence: per source

An issue was discovered in Joomla! 4.0.0 through 4.2.3. Sites with publicly enabled debug mode exposed data of previous requests.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-27912US	medium5.3	0.62% (49th)	—	2022-10-25
An issue was discovered in Joomla! 4.0.0 through 4.2.3. Sites with publicly enabled debug mode exposed data of previous requests.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.