Joomla! Framework Remote Code Injection Vulnerability · CVE-2015-8566 · GitHub Advisory Database · GitHub

Joomla! Framework Remote Code Injection Vulnerability

High severity GitHub Reviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Apr 25, 2024

Package

joomla/session (Composer)

Affected versions

< 1.3.1

Patched versions

1.3.1

Description

The Session package 1.x before 1.3.1 for Joomla! Framework allows remote attackers to execute arbitrary code via unspecified session values.

References

Published by the National Vulnerability Database

Dec 16, 2015

Published to the GitHub Advisory Database May 17, 2022

Reviewed Apr 25, 2024

Last updated Apr 25, 2024

Weaknesses

CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component. Learn more on MITRE.