Skip to main content

Joomla CVE-2024-27185

CRITICAL
HTTP Request/Response Smuggling (CWE-444)
2024-08-20 security@joomla.org
Information Disclosure Request Smuggling Joomla
9.1
CVSS 3.1 · Vendor: joomla
Share

Severity by source

Vendor (joomla) PRIMARY
9.1 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Primary rating from Vendor (joomla) · only source for this CVE.

CVSS VectorVendor: joomla

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Aug 20, 2024 - 16:15 cve.org
CRITICAL 9.1

DescriptionCVE.org

The pagination class includes arbitrary parameters in links, leading to cache poisoning attack vectors.

AnalysisAI

The pagination class includes arbitrary parameters in links, leading to cache poisoning attack vectors. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as HTTP Request/Response Smuggling (CWE-444), which allows attackers to manipulate HTTP request interpretation between frontend and backend servers. The pagination class includes arbitrary parameters in links, leading to cache poisoning attack vectors. Affected products include: Joomla Joomla\!.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Enforce strict HTTP parsing, normalize requests at proxy layer, use HTTP/2 end-to-end, reject ambiguous headers.

More in Joomla

View all
CVE-2017-8917 CRITICAL POC
9.8 May 17

SQL injection vulnerability in Joomla!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable,

CVE-2016-10045 CRITICAL POC
9.8 Dec 30

The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail comman
CVE-2015-8562 HIGH POC
7.5 Dec 16

Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public explo
CVE-2015-7297 HIGH POC
7.5 Oct 29

SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low

CVE-2016-8869 CRITICAL POC
9.8 Nov 04

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla!. Rated
CVE-2016-8870 HIGH POC
8.1 Nov 04

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla!. Rated
CVE-2015-7857 HIGH POC
7.5 Oct 29

SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.p
CVE-2015-7858 HIGH POC
7.5 Oct 29

SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low

CVE-2013-5576 MEDIUM POC
6.8 Oct 09

administrator/components/com_media/helpers/media.php in the media manager in Joomla!. Rated medium severity (CVSS 6.8),

CVE-2014-7228 HIGH POC
7.5 Nov 03

Akeeba Restore (restore.php), as used in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploit
CVE-2014-7981 HIGH POC
7.5 Oct 08

SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low

CVE-2017-14596 CRITICAL POC
9.8 Sep 20

In Joomla!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required,

Same weakness CWE-444 – HTTP Request/Response Smuggling

View all
CVE-2018-3907 CRITICAL POC
10.0
CVE-2023-41265 CRITICAL POC
9.9
CVE-2024-10264 CRITICAL POC
9.8
CVE-2022-2466 CRITICAL POC
9.8
CVE-2020-7611 CRITICAL POC
9.8
CVE-2020-10109 CRITICAL POC
9.8
CVE-2020-10108 CRITICAL POC
9.8
CVE-2021-38162 CRITICAL POC
9.4

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2024-27185 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy