– Core – Path Disclosure in phpuft8 mapping files
- Project: Joomla!
- SubProject: CMS
- Impact: Low
- Severity: Low
- Versions: 3.6.0 – 3.9.12
- Exploit type: Path Disclosure
- Reported Date: 2019-November-01
- Fixed Date: 2019-November-05
- CVE Number: CVE-2019-18674
Missing access check in the phputf8 mapping files could lead to an path disclosure.
Joomla! CMS versions 3.6.0 – 3.9.12
Upgrade to version 3.9.13
The JSST at the Joomla! Security Centre.
Reported By: Phil Taylor