{"action":"Upgrade joomla/filesystem to 1.6.2 or later.","affected":[{"fixed":"1.6.2","introduced":"0"},{"fixed":"2.0.1","introduced":"2.0.0"}],"component":"joomla/filesystem","cve_ids":["CVE-2022-23794"],"ecosystem":"Packagist","epss":0.00924,"exploited":false,"fixed_versions":["1.6.2","2.0.1"],"ghsa_id":"GHSA-rc8q-45v8-x6xc","id":"tcs_01M5KF85CHMHYZCHAMW6JFEQV9","modified_at":"2025-04-03T15:27:05.613005Z","published_at":"2022-03-31T00:00:15Z","references":["https://osv.dev/vulnerability/GHSA-rc8q-45v8-x6xc","https://nvd.nist.gov/vuln/detail/CVE-2022-23794","https://developer.joomla.org/security-centre/871-20220302-core-path-disclosure-within-filesystem-error-messages.html","https://github.com/FriendsOfPHP/security-advisories/blob/master/joomla/filesystem/CVE-2022-23794.yaml","https://github.com/joomla-framework/filesystem"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-rc8q-45v8-x6xc","url":"https://osv.dev/vulnerability/GHSA-rc8q-45v8-x6xc"}],"summary":"Path Disclosure within joomla/filesystem class"}