CVE-2008-3226 Joomla! allows attackers to access cached pages

Medium 5.0 Published Updated

Attackers can access cached pages in Joomla, leading to information disclosure without authentication.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
Available

What is CVE-2008-3226?

CVE-2008-3226 is a medium-severity vulnerability in Joomla Joomla, published on 18 Jul 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The file caching implementation in Joomla! before 1.5.4 allows attackers to access cached pages via unknown attack vectors.

Weakness: CWE-264

Which versions are affected by CVE-2008-3226?

2 open source packages ship an affected version, including joomla/joomla-platform. It affects 1 product.

PackageAffectedFixed in
joomla/joomla-platform PackagistAll versions1.5.4
joomla/joomla-platform PackagistAll versions1.5.4

Products include Joomla Joomla.

How do I fix CVE-2008-3226?

Upgrade joomla/joomla-platform to 1.5.4 or later.

Is CVE-2008-3226 being exploited?

There is no known exploitation of CVE-2008-3226 in the wild and no public exploit code.

All Joomla Joomla vulnerabilities

Sources

Also known as GHSA-8xqm-3qm5-qhfv.

Is CVE-2008-3226 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free