CVE-2008-3227 Joomla! Open Redirect vulnerability

High 7.5 Published Updated

An unspecified vulnerability in Joomla allows attackers to perform open redirects, potentially facilitating phishing or spam attacks.

Exploited in the wild
Not known
Login needed
Not stated
Attackable
Over the internet
Victim action needed
A user has to click or open something
Fix
Available

What is CVE-2008-3227?

CVE-2008-3227 is a high-severity vulnerability in Joomla Joomla, published on 18 Jul 2008. It can be exploited over the network, and only if a user opens a file or follows a link.

Official description

Unspecified vulnerability in Joomla! before 1.5.4 has unknown impact and attack vectors related to a "User Redirect Spam fix," possibly an open redirect vulnerability.

Weakness: CWE-59

Which versions are affected by CVE-2008-3227?

2 open source packages ship an affected version, including joomla/framework. It affects 1 product.

PackageAffectedFixed in
joomla/framework PackagistAll versions1.5.4
joomla/framework PackagistAll versions1.5.4

Products include Joomla Joomla.

How do I fix CVE-2008-3227?

Upgrade joomla/framework to 1.5.4 or later.

Is CVE-2008-3227 being exploited?

There is no known exploitation of CVE-2008-3227 in the wild and no public exploit code.

All Joomla Joomla vulnerabilities

Sources

Also known as GHSA-gm5q-2cx5-wr2j.

Is CVE-2008-3227 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free