CVE-2011-2889: Joomla!

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

templates/system/error.php in Joomla! before 1.5.23 might allow remote attackers to obtain sensitive information via unspecified vectors that trigger an undefined value of a certain error field, leading to disclosure of the installation path. NOTE: this might overlap CVE-2011-2488.

Affected products

• Joomla! Joomla!: up to and including 1.5.22; version 1.5.0 only; version 1.5.1 only; version 1.5.2 only; version 1.5.3 only; version 1.5.4 only; …

Published 2011-07-27. Last modified 2026-06-16.