GitHub Advisoryadvisory · Packagist

GHSA-9qr2-fx2g-pfvh Joomla! Open Redirect vulnerability

MEDIUM Published 2022-05-02 Modified 2024-02-09 Official page ↗
Aliases
CVE-2008-4104
Ecosystem
Packagist
Packages
joomla/framework
Severity
Moderate
Weaknesses
CWE-601
Reviewed
2024-02-09

Affected packages

• Packagist joomla/framework: >= 1.5.0, < 1.5.7 → fixed in 1.5.7

Description

Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a "passed in" URL.

Related

Alias · CVE (1)

  • CVE-2008-4104 Multiple open redirect vulnerabilities in Joomla! vulnerability

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References