CVE-2008-3228: Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs
Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.
Other sources
Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs
— Packagist
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/joomla/joomla-platformto a version that resolves this vulnerability.Fixed in 1.5.4 - Upgrade
Upgrade
Joomla!to a version that resolves this vulnerability.Fixed in 1.5.4
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3228?
The severity of CVE-2008-3228 is considered moderate due to the potential for remote attack vectors.
How do I fix CVE-2008-3228?
To fix CVE-2008-3228, upgrade Joomla! to version 1.5.4 or later, which addresses the .htaccess configuration issue.
What versions of Joomla! are affected by CVE-2008-3228?
CVE-2008-3228 affects Joomla! versions prior to 1.5.4, including several earlier versions.
What vulnerabilities does CVE-2008-3228 expose?
CVE-2008-3228 exposes the site to common exploits targeting SEF URLs due to improper .htaccess configuration.
Is there a workaround for CVE-2008-3228?
A temporary workaround for CVE-2008-3228 could involve manually configuring .htaccess settings to block common exploits until an upgrade can be performed.