Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2020-35611
An issue was discovered in Joomla 2.5.0 through 3.9.22. The globlal configuration page does not remove secrets from the HTML output disclosing the current values.