The language file parsing process could be manipulated to expose environment variables. Environment variables might contain sensible information.
CVE Number: CVE-2023-40626
This vulnerability affects the following application versions:
- Joomla 3.9.0
- Joomla 3.9.1
- Joomla 3.9.2
- Joomla 3.9.3
- Joomla 3.9.4
- Joomla 3.9.5
- Joomla 3.9.6
- Joomla 3.9.7
- Joomla 3.9.8
- Joomla 3.9.9
- Joomla 3.9.10
- Joomla 3.9.11
- Joomla 3.9.12
- Joomla 3.9.13
- Joomla 3.9.14
- Joomla 3.9.15
- Joomla 3.9.16
- Joomla 3.9.17
- Joomla 3.9.18
- Joomla 3.9.19
- Joomla 3.9.20
- Joomla 3.9.21
- Joomla 3.9.22
- Joomla 3.9.23
- Joomla 3.9.24
- Joomla 3.9.25
- Joomla 3.9.26
- Joomla 3.9.27
- Joomla 3.9.28
- Joomla 4.0.0
- Joomla 4.0.1
- Joomla 4.0.2
- Joomla 4.0.3
- Joomla 4.0.4
- Joomla 4.0.5
- Joomla 4.0.6
- Joomla 4.1.0
- Joomla 4.1.1
- Joomla 4.1.2
- Joomla 4.1.3
- Joomla 4.1.4
- Joomla 4.1.5
- Joomla 4.2.0
- Joomla 4.2.1
- Joomla 4.2.2
- Joomla 4.2.3
- Joomla 4.2.4
- Joomla 4.2.5
- Joomla 4.2.6
- Joomla 4.2.7
- Joomla 4.2.8
- Joomla 4.2.9
- Joomla 4.3.0
- Joomla 4.3.1
- Joomla 4.3.2
- Joomla 4.3.3
- Joomla 4.3.4
- Joomla 4.4.0
- Joomla 5.0.0