Joomla Security Notice :: June 6, 2013

[Jason]

Today's notice from Joomla:

[20130201] - Core - Information Disclosure
Posted: 04 Feb 2013 03:09 PM PST
-   Project: Joomla!
-   SubProject: All
-   Severity: Low
-   Versions: 3.0.2 and earlier 3.0.x versions; version 2.5.8 and earlier 2.5.x versions.
-   Exploit type: Information disclosure
-   Reported Date: 2012-October-31
-   Fixed Date: 2013-February-4
-   CVE Number: CVE-2013-1453
Description
Method of encoding search terms led to possible information disclosure.
Affected Installs
Joomla! version 3.0.2 and earlier 3.0.x versions; version 2.5.8 and earlier 2.5.x versions.
Solution
Upgrade to version 3.0.3 or 2.5.9.
Reported by Egidio Romano
Contact
The JSST at the Joomla! Security Center.