Advisories for Composer/Joomla/Joomla-Platform package

2022

Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs

Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.

Joomla! allows attackers to access cached pages

The file caching implementation in Joomla! before 1.5.4 allows attackers to access cached pages via unknown attack vectors.