What is GHSA-wwfh-28hx-w2r2?

GHSA-wwfh-28hx-w2r2 is a security advisory published by GitHub Security Advisories with High severity. Joomla! Framework Remote Code Injection Vulnerability

Which CVE IDs does GHSA-wwfh-28hx-w2r2 cover?

GHSA-wwfh-28hx-w2r2 covers the following CVE IDs: CVE-2015-8566. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-wwfh-28hx-w2r2?

GHSA-wwfh-28hx-w2r2 affects 1 product, including: composer/joomla/session:\u003c 1.3.1.

GHSA-wwfh-28hx-w2r2High

Joomla! Framework Remote Code Injection Vulnerability

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

April 25, 2024

🔗 CVE IDs covered (1)

CVE-2015-8566 →

📋 Description

The Session package 1.x before 1.3.1 for Joomla! Framework allows remote attackers to execute arbitrary code via unspecified session values.

🎯 Affected products1

composer/joomla/session:< 1.3.1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2015-8566
https://developer.joomla.org/security-centre/637-20151205-session-remote-code-execution-vulnerability.html
https://github.com/FriendsOfPHP/security-advisories/blob/master/joomla/session/CVE-2015-8566.yaml
https://web.archive.org/web/20160603093633/http://www.securityfocus.com/bid/79197
https://github.com/advisories/GHSA-wwfh-28hx-w2r2