What is GHSA-h22q-g2c7-2jwj?

GHSA-h22q-g2c7-2jwj is a security advisory published by GitHub Security Advisories with Medium severity. Joomla! vulnerable to CRLF injection

Which CVE IDs does GHSA-h22q-g2c7-2jwj cover?

GHSA-h22q-g2c7-2jwj covers the following CVE IDs: CVE-2007-4190. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-h22q-g2c7-2jwj?

GHSA-h22q-g2c7-2jwj affects 1 product, including: composer/joomla/application:\u003c 1.0.13.

GHSA-h22q-g2c7-2jwjMedium

Joomla! vulnerable to CRLF injection

Vendor

GitHub Security Advisories

Published

May 1, 2022

Last Modified

September 22, 2023

🔗 CVE IDs covered (1)

CVE-2007-4190 →

📋 Description

CRLF injection vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to inject arbitrary HTTP headers and probably conduct HTTP response splitting attacks via CRLF sequences in the url parameter. NOTE: this can be leveraged for cross-site scripting (XSS) attacks. NOTE: some of these details are obtained from third party information.

🎯 Affected products1

composer/joomla/application:< 1.0.13

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2007-4190
https://web.archive.org/web/20071001212343/http://www.joomla.org/content/view/3677/1/
https://github.com/advisories/GHSA-h22q-g2c7-2jwj