HIGH

GHSA-gm5q-2cx5-wr2j

Joomla! Open Redirect vulnerability

Quick fix

GHSA-gm5q-2cx5-wr2j — joomla/framework: upgrade to the fixed version with the command below.

composer require joomla/framework:^1.5.4

Details

Unspecified vulnerability in Joomla! before 1.5.4 has unknown impact and attack vectors related to a "User Redirect Spam fix," possibly an open redirect vulnerability.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/joomla/framework

Introduced in: 0Fixed in: 1.5.4

Fixcomposer require joomla/framework:^1.5.4

References

https://nvd.nist.gov/vuln/detail/CVE-2008-3227[ADVISORY]
https://exchange.xforce.ibmcloud.com/vulnerabilities/44205[WEB]
https://github.com/joomla/joomla-framework[PACKAGE]
https://web.archive.org/web/20080501000000*/http://www.joomla.org/content/view/5180/1[WEB]
http://www.openwall.com/lists/oss-security/2008/07/12/2[WEB]