In Joomla! before 3.8.2, a logic bug in com_fields exposed read-only information about a site's custom fields to unauthorized users.

Published Nov 9, 2017 · Updated Aug 5, 2024 · Assigned by mitre