PT-2008-4644 · Joomla · Joomla!

Hanno Böck · Publicado 2008-07-18 · Atualizado 2022-05-01 · CVE-2008-3228

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 1.5.4

Description: The issue concerns the configuration of .htaccess files to apply security checks for SEF URLs, which may leave them open to common exploits. The impact and specifics of remote attack vectors are not detailed.

Recommendations: For versions prior to 1.5.4, update to version 1.5.4 or later to ensure .htaccess is properly configured to block common exploits for SEF URLs.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2008-3228

GHSA-MXR8-PCPG-M23J

Produtos afetados

Joomla!

Referências · 9

• https://github.com/joomla/joomla-platform · Nota
• http://joomla.org/content/view/5180/1 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3228 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44206 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3228 · Nota de Segurança
• https://web.archive.org/web/20080730154423/http://joomla.org/content/view/5180/1 · Nota
• http://openwall.com/lists/oss-security/2008/07/12/2 · Nota
• https://osv.dev/vulnerability/GHSA-mxr8-pcpg-m23j · Aviso do Fabricante
• http://joomla.org/content/view/5180/1/1/1/#htaccess · Nota