GHSA-9qr2-fx2g-pfvh

Source

https://github.com/advisories/GHSA-9qr2-fx2g-pfvh

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9qr2-fx2g-pfvh/GHSA-9qr2-fx2g-pfvh.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-9qr2-fx2g-pfvh

Aliases

CVE-2008-4104

Published

2022-05-02T00:06:48Z

Modified

2024-02-09T17:11:39.068300Z

Summary

Joomla! Open Redirect vulnerability

Details

Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a "passed in" URL.

Database specific

{
    "github_reviewed_at": "2024-02-09T16:54:17Z",
    "nvd_published_at": "2008-09-18T17:59:00Z",
    "cwe_ids": [
        "CWE-601"
    ],
    "severity": "MODERATE",
    "github_reviewed": true
}

References

Affected packages

Packagist / joomla/framework

Package

Name: joomla/framework
Purl: pkg:composer/joomla/framework

Affected ranges

Type: ECOSYSTEM
Events: Introduced

1.5.0

Fixed

1.5.7

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9qr2-fx2g-pfvh/GHSA-9qr2-fx2g-pfvh.json"