Lucene search

K
osvGoogleOSV:GHSA-H22Q-G2C7-2JWJ
HistoryMay 01, 2022 - 6:21 p.m.

Joomla! vulnerable to CRLF injection

2022-05-0118:21:10
Google
osv.dev
1

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.0%

CRLF injection vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to inject arbitrary HTTP headers and probably conduct HTTP response splitting attacks via CRLF sequences in the url parameter. NOTE: this can be leveraged for cross-site scripting (XSS) attacks. NOTE: some of these details are obtained from third party information.

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.0%

Related for OSV:GHSA-H22Q-G2C7-2JWJ