2018-05-22 17:29:00 2018-06-22 18:17:14

An issue was discovered in Joomla! Core before 3.8.8. Under specific circumstances (a redirect issued with a URI containing a username and password when the Location: header cannot be used), a lack of escaping the user-info component of the URI could result in an XSS vulnerability.

Vector

NETWORK

Complexity

HIGH

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Joomla Joomla! - (not an official CPE) Joomla Joomla! 1.0.0 (not an official CPE) Joomla Joomla! 1.0.1 (not an official CPE) Joomla Joomla! 1.0.2 (not an official CPE) Joomla Joomla! 1.0.3 (not an official CPE) Joomla Joomla! 1.0.4 (not an official CPE) Joomla Joomla! 1.0.5 (not an official CPE) Joomla Joomla! 1.0.6 (not an official CPE) Joomla Joomla! 1.0.7 (not an official CPE) Joomla Joomla! 1.0.8 (not an official CPE) Joomla Joomla! 1.0.9 (not an official CPE) Joomla Joomla! 1.0.10 (not an official CPE) Joomla Joomla! 1.0.11 (not an official CPE) Joomla Joomla! 1.0.12 (not an official CPE) Joomla Joomla! 1.0.13 (not an official CPE) Joomla Joomla! 1.0.14 (not an official CPE) Joomla Joomla! 1.0.15 (not an official CPE) Joomla! 1.5.0 Joomla! 1.5.1 Joomla! 1.5.2 Joomla! 1.5.3 Joomla! 1.5.4 Joomla! 1.5.5 Joomla! 1.5.6 Joomla! 1.5.7 Joomla! 1.5.8 Joomla! 1.5.9 Joomla! 1.5.10 Joomla! 1.5.11 Joomla! 1.5.12 Joomla! 1.5.13 Joomla! 1.5.14 Joomla! 1.5.15 Joomla! 1.5.15:rc Joomla! 1.5.16 Joomla! 1.5.17 Joomla! 1.5.18 Joomla! 1.5.19 Joomla! 1.5.20 Joomla! 1.5.21 Joomla! 1.5.22 Joomla! 1.5.23 Joomla! 1.5.24 Joomla! 1.5.25 Joomla! 1.5.26 Joomla! 1.6 Alpha Joomla! 1.6 Alpha 2 Joomla! 1.6 Beta 1 Joomla! 1.6 Beta10 Joomla! 1.6 Beta 11 Joomla! 1.6 Beta 12 Joomla! 1.6 Beta 13 Joomla! 1.6 Beta 14 Joomla! 1.6 Beta 15 Joomla! 1.6 Beta 2 Joomla! 1.6 Beta 3 Joomla! 1.6 Beta 4 Joomla! 1.6 Beta 5 Joomla! 1.6 Beta 6 Joomla! 1.6 Beta 7 Joomla! 1.6 Beta 8 Joomla! 1.6 Beta 9 Joomla! 1.6 Release Candidate 1 Joomla! 1.6.0 Joomla! 1.6.1 Joomla Joomla! 1.6.2 (not an official CPE) Joomla! 1.6.3 Joomla! 1.6.4 Joomla! 1.6.5 Joomla! 1.6.6 Joomla! 1.7.0 Joomla! 1.7.1 Joomla! 1.7.2 Joomla! 1.7.3 Joomla! 1.7.4 Joomla! 1.7.5 Joomla! 2.5.0 Joomla! 2.5.1 Joomla! 2.5.2 Joomla! 2.5.3 Joomla! 2.5.4 Joomla! 2.5.5 Joomla! 2.5.6 Joomla! 2.5.7 Joomla! 2.5.8 Joomla! 2.5.9 Joomla! 2.5.10 Joomla! 2.5.11 Joomla! 2.5.12 Joomla! 2.5.13 Joomla! 2.5.14 Joomla Joomla! 2.5.15 (not an official CPE) Joomla Joomla! 2.5.16 (not an official CPE) Joomla Joomla! 2.5.17 (not an official CPE) Joomla Joomla! 2.5.18 (not an official CPE) Joomla Joomla! 2.5.19 (not an official CPE) Joomla Joomla! 2.5.20 (not an official CPE) Joomla Joomla! 2.5.21 (not an official CPE) Joomla Joomla! 2.5.22 (not an official CPE) Joomla Joomla! 2.5.23 (not an official CPE) Joomla Joomla! 2.5.24 (not an official CPE) Joomla Joomla! 2.5.25 (not an official CPE) Joomla Joomla! 2.5.26 (not an official CPE) Joomla Joomla! 2.5.27 (not an official CPE) Joomla Joomla! 2.5.28 (not an official CPE) Joomla! 3.0.0 Joomla! 3.0.1 Joomla! 3.0.2 Joomla! 3.0.3 Joomla! 3.0.4 Joomla! 3.1.0 Joomla! 3.1.1 Joomla! 3.1.2 Joomla! 3.1.3 Joomla! 3.1.4 Joomla! 3.1.5 Joomla Joomla! 3.1.6 (not an official CPE) Joomla Joomla! 3.2.0 (not an official CPE) Joomla Joomla! 3.2.1 (not an official CPE) Joomla Joomla! 3.2.2 (not an official CPE) Joomla Joomla! 3.2.3 (not an official CPE) Joomla Joomla! 3.2.4 (not an official CPE) Joomla Joomla! 3.2.6 (not an official CPE) Joomla Joomla! 3.2.7 (not an official CPE) Joomla Joomla! 3.3.0 (not an official CPE) Joomla Joomla! 3.3.1 (not an official CPE) Joomla Joomla! 3.3.2 (not an official CPE) Joomla Joomla! 3.3.3 (not an official CPE) Joomla Joomla! 3.3.4 (not an official CPE) Joomla! 3.3.5 Joomla Joomla! 3.3.6 (not an official CPE) Joomla! 3.4.0 Joomla! 3.4.0 Alpha Joomla! 3.4.0 Beta 1 Joomla! 3.4.0 Beta 2 Joomla! 3.4.0 Beta 3 Joomla! 3.4.0 Release Candidate 1 Joomla! 3.4.1 Joomla! 3.4.1 Release Candidate 1 Joomla! 3.4.1 Release Candidate 2 Joomla! 3.4.2 Release Candidate 1 Joomla Joomla! 3.4.3 (not an official CPE) Joomla Joomla! 3.4.4 (not an official CPE) Joomla Joomla! 3.4.5 (not an official CPE) Joomla Joomla! 3.4.6 (not an official CPE) Joomla Joomla! 3.4.7 (not an official CPE) Joomla Joomla! 3.4.8 (not an official CPE) Joomla Joomla! 3.4.8 Rc (not an official CPE) Joomla Joomla! 3.5.0 (not an official CPE) Joomla Joomla! 3.5.0 Beta (not an official CPE) Joomla Joomla! 3.5.0 Beta2 (not an official CPE) Joomla Joomla! 3.5.0 Beta3 (not an official CPE) Joomla Joomla! 3.5.0 Beta4 (not an official CPE) Joomla Joomla! 3.5.0 Beta5 (not an official CPE) Joomla Joomla! 3.5.0 Rc (not an official CPE) Joomla Joomla! 3.5.0 Rc2 (not an official CPE) Joomla Joomla! 3.5.0 Rc3 (not an official CPE) Joomla Joomla! 3.5.0 Rc4 (not an official CPE) Joomla Joomla! 3.5.1 (not an official CPE) Joomla Joomla! 3.5.1 Rc (not an official CPE) Joomla Joomla! 3.6.0 (not an official CPE) Joomla Joomla! 3.6.0 Alpha (not an official CPE) Joomla Joomla! 3.6.0 Beta1 (not an official CPE) Joomla Joomla! 3.6.0 Beta2 (not an official CPE) Joomla Joomla! 3.6.0 Rc (not an official CPE) Joomla Joomla! 3.6.0 Rc2 (not an official CPE) Joomla Joomla! 3.6.1 (not an official CPE) Joomla Joomla! 3.6.1 Rc1 (not an official CPE) Joomla Joomla! 3.6.1 Rc2 (not an official CPE) Joomla Joomla! 3.6.2 (not an official CPE) Joomla Joomla! 3.6.3 (not an official CPE) Joomla Joomla! 3.6.3 Rc1 (not an official CPE) Joomla Joomla! 3.6.3 Rc2 (not an official CPE) Joomla Joomla! 3.6.3 Rc3 (not an official CPE) Joomla Joomla! 3.6.4 (not an official CPE) Joomla Joomla! 3.6.5 (not an official CPE) Joomla Joomla! 3.7.0 (not an official CPE) Joomla Joomla! 3.7.1 (not an official CPE) Joomla Joomla! 3.7.2 (not an official CPE) Joomla Joomla! 3.7.3 (not an official CPE) Joomla Joomla! 3.7.4 (not an official CPE) Joomla Joomla! 3.7.5 (not an official CPE) Joomla Joomla! 3.8.1 (not an official CPE)