CVE-2020-35611

No fix known EPSS 1%

An issue was discovered in Joomla! 2.5.0 through 3.9.22. The globlal configuration page does not remove secrets from the HTML output, disclosing the current values.

Published 2020-12-28 · CVE record · OSV

Products: Joomla! Project Joomla! CMS