Critical · 9.1 CVE-2024-27185 EUVD-2024-24424GHSA-q677-7pjp-5hq5

[20240802] - Core - Cache Poisoning in Pagination

Published Aug 20, 2024 · Updated Mar 29, 2025 · Assigned by Joomla

Description

The pagination class includes arbitrary parameters in links, leading to cache poisoning attack vectors.

Vendor	Product	Affected	Fixed
Joomla! Project	Joomla! CMS	3.0.0-3.10.16, 4.0.0-4.4.6, 5.0.0-5.1.2	—