CVE-2017-8057
In Joomla! 3.4.0 through 3.6.5 (fixed in 3.7.0), multiple files caused full path disclosures on systems with enabled error reporting.
Date published : 2017-04-25
http://www.securityfocus.com/bid/98028
https://developer.joomla.org/security-centre/690-20170408-core-information-disclosure.html