Medium CVE-2008-3228 EUVD-2008-3216GHSA-mxr8-pcpg-m23j

Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs

Published Jul 18, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Package: joomla/joomla-platform Ecosystem: Packagist

Description

Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Packagist	joomla/joomla-platform	< 1.5.4	1.5.4	GHSA-mxr8-pcpg-m23j

References

[oss-security] 20080712 CVE requests: joomla <1.5.4 mailing-list
http://www.joomla.org/content/view/5180/1/
http://www.joomla.org/content/view/5180/1/1/1/#htaccess
joomla-block-common-unspecified(44206) vdb-entry