The language file parsing process could be manipulated to expose environment variables. Environment variables might contain sensible information.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Joomla! | Joomla | 1.6.0 (including) | 3.10.14 (excluding) |
| Joomla! | Joomla | 4.0.0 (including) | 4.4.1 (excluding) |
| Joomla! | Joomla | 5.0.0 (including) | 5.0.0 (including) |