CVE-2022-23794

An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length causes the error. This error brings up the screen with the path of the source code of the web application.

• CWE-209

• https://developer.joomla.org/security-centre/871-20220302-core-path-disclosure-within-filesystem-error-messages.htmlVendor Advisory
• https://developer.joomla.org/security-centre/871-20220302-core-path-disclosure-within-filesystem-error-messages.htmlVendor Advisory

Published

Mar 30, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23779Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes…5.3
• CVE-2022-2378The Easy Student Results WordPress plugin through 2.2.8 does…6.1
• CVE-2022-2379The Easy Student Results WordPress plugin through 2.2.8 lack…7.5
• CVE-2022-23790Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2022-23791Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2022-23793An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.…7.5
• CVE-2022-23795An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.…9.8
• CVE-2022-23796An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lac…6.1
• CVE-2022-23797An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.…9.8
• CVE-2022-23798An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.…6.1
• CVE-2022-23799An issue was discovered in Joomla! 4.0.0 through 4.1.0. Unde…9.8
• CVE-2022-2380The Linux kernel was found vulnerable out of bounds memory a…5.5