{"id":"GHSA-9qr2-fx2g-pfvh","aliases":["CVE-2008-4104"],"title":"Joomla! Open Redirect vulnerability","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a \"passed in\" URL.","severity":"medium","score":null,"published":"2022-05-02T00:06:48.000Z","modified":"2024-02-09T17:11:39.068Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"joomla/framework","sources":[{"name":"OSV · GHSA-9qr2-fx2g-pfvh","url":"https://osv.dev/vulnerability/GHSA-9qr2-fx2g-pfvh"}],"ranges":[{"events":[{"introduced":"1.5.0"},{"fixed":"1.5.7"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["1.5.7"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2008-4104","https://exchange.xforce.ibmcloud.com/vulnerabilities/45071","https://github.com/joomla/joomla-framework","https://web.archive.org/web/20081219152017/http://developer.joomla.org/security/news/274-20080904-core-redirect-spam.html","http://marc.info/?l=oss-security&m=122115344915232&w=2","http://marc.info/?l=oss-security&m=122118210029084&w=2","http://marc.info/?l=oss-security&m=122152798516853&w=2","http://securityreason.com/securityalert/4275"],"sources":[{"name":"OSV","id":"GHSA-9qr2-fx2g-pfvh","modified":"2024-02-09T17:11:39.068300Z","url":"https://osv.dev/vulnerability/GHSA-9qr2-fx2g-pfvh"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T22:15:33.378Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}