{"id":"GHSA-mxr8-pcpg-m23j","aliases":["CVE-2008-3228"],"title":"Joomla! doesn't configure .htaccess to apply certain security checks that \"block common exploits\" to SEF URLs","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that \"block common exploits\" to SEF URLs, which has unknown impact and remote attack vectors.","severity":"medium","score":null,"published":"2022-05-01T23:57:57.000Z","modified":"2025-04-09T21:27:09.173Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"joomla/joomla-platform","sources":[{"name":"OSV · GHSA-mxr8-pcpg-m23j","url":"https://osv.dev/vulnerability/GHSA-mxr8-pcpg-m23j"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.5.4"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["1.5.4"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2008-3228","https://exchange.xforce.ibmcloud.com/vulnerabilities/44206","https://github.com/joomla/joomla-platform","https://web.archive.org/web/20080730154423/http://www.joomla.org/content/view/5180/1","http://www.joomla.org/content/view/5180/1/1/1/#htaccess","http://www.openwall.com/lists/oss-security/2008/07/12/2"],"sources":[{"name":"OSV","id":"GHSA-mxr8-pcpg-m23j","modified":"2025-04-09T21:27:09.173272Z","url":"https://osv.dev/vulnerability/GHSA-mxr8-pcpg-m23j"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"unavailable","checkedAt":"2026-10-28T21:45:31.439Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}