CLSA-2026-1787147294 TuxCare security update for org.springframework.hateoas:spring-hateoas (2 CVEs)

TuxCare rebuilt org.springframework.hateoas:spring-hateoas to address 2 CVEs. Fixed in 2.3.4-tuxcare.1...

CVE-2024-21723

creationtimestamp| type| source ---|---|--- 2024-02-22 14:40:05+00:00| seen| https://t.me/truesecator/5448 2024-02-29 02:56:11+00:00| seen| https://t.me/ctinow/196101 2024-02-29 03:02:45+00:00| seen| https://t.me/ctinow/196118 2026-07-06 11:00:12+00:00| seen| https://t.me/ZerodayAlert/177...

Joomla! 5.x < 5.0.3 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 1.5.x prior to 4.4.3 or 5.x prior to 5.0.3. It is, therefore, affected by multiple vulnerabilities. - An insufficient session expiration in MFA management views. CVE-2024-21722 - An open redirect i...

Joomla! 1.5.x < 4.4.3 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 1.5.x prior to 4.4.3 or 5.x prior to 5.0.3. It is, therefore, affected by multiple vulnerabilities. - An insufficient session expiration in MFA management views. CVE-2024-21722 - An open redirect i...

CVE-2024-21723

The Joomla! content management system (CMS) is vulnerable to an open redirect (CWE-601) due to inadequate parsing of URLs within the installation application . A malicious actor can exploit this flaw to remotely redirect users to an arbitrary, unreliable website. To mitigate this risk, users shou...

CVE-2024-21723 [20240202] - Core - Open redirect in installation application

Inadequate parsing of URLs could result into an open redirect...

Joomla 1.5.x < 3.10.15 / 4.0.x < 4.4.3 / 5.0.x < 5.0.3 Multiple Vulnerabilities (5904-joomla-5-0-3-and-4-4-3-security-and-bug-fix-release)

According to its self-reported version, the instance of Joomla! running on the remote web server is 1.5.x prior to 3.10.15, 4.0.x prior to 4.4.3, or 5.0.x prior to 5.0.3. It is, therefore, affected by multiple vulnerabilities. - The MFA management features did not properly terminate existing user...