title: [20201102] - Core - Disclosure of secrets in Global Configuration page
description: An issue was discovered in Joomla! 2.5.0 through 3.9.22. The globlal configuration page does not remove secrets from the HTML output, disclosing the current values.
problem types: Information Disclosure
affected:
{
product: Joomla! CMS
vendor: Joomla! Project
versions:
status: affected, version: 2.5.0-3.9.22
}