Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-23794 BIT-joomla-2022-23794EUVD-2022-1530GHSA-rc8q-45v8-x6xc

[20220302] - Core - Path Disclosure within filesystem error messages

Published Mar 30, 2022 · Updated Feb 25, 2026 · Assigned by Joomla

Description

An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length causes the error. This error brings up the screen with the path of the source code of the web application.

Affected products

VendorProductAffectedFixed
Joomla! Project Joomla! CMS 3.0.0-3.10.6 & 4.0.0-4.1.0 —
Joomla! Project joomla/filesystem 1.0.0-1.6.1 & 2.0.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist joomla/filesystem < 1.6.2 1.6.2 GHSA-rc8q-45v8-x6xc
Packagist joomla/filesystem >= 2.0.0, < 2.0.1 2.0.1 GHSA-rc8q-45v8-x6xc

References