GHSA-mxr8-pcpg-m23jmedium
Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs
Impact
Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.
Source excerpt · OSVAffected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
joomla/joomla-platform Packagist
| Affected range | Recorded fix |
|---|---|
| Earlier releases before 1.5.4Ecosystem versions | 1.5.4 |
Version evidence: OSV · GHSA-mxr8-pcpg-m23j
View original version evidence (0 explicit versions)
Original source description
Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.
References
- Security advisory nvd.nist.gov/vuln/detail/CVE-2008-3228
- Security advisory exchange.xforce.ibmcloud.com/vulnerabilities/44206
- Source reference github.com/joomla/joomla-platform
- Source reference web.archive.org/web/20080730154423/http://www.joomla.org/content/view/5180/1
- Source reference www.joomla.org/content/view/5180/1/1/1/
- Security advisory www.openwall.com/lists/oss-security/2008/07/12/2