CVE-2024-27184

[20240801] - Core - Inadequate validation of internal URLs

State
Published
Severity
6.1 Medium
Published
Aug 20, 2024
Updated
Nov 26, 2024
Reserved
Feb 21, 2024

Read the record on cve.org

Description

Inadequate validation of URLs could result into an invalid check whether an redirect URL is internal or not..

Scores

CVSSScoreVectorSource
3.16.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCISA-ADP

Weaknesses

Affected Products

ProductVersions
Joomla! CMSJoomla! Project
  • 3.4.6-3.10.16Affected
  • 4.0.0-4.4.6Affected
  • 5.0.0-5.1.2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.