IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
4.8Media

CVE-2026-71572Joomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2

Joomla! Project Joomla! CMS Publicada: (hace 2 meses)

Descripción

Joomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 - Lack of output processing allowed a header injection in the multiple download views, leading to reflected file download / content-type confusion.

Debilidad (CWE): CWE-93

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
joomla joomla! 3.0.0 – < 5.4.8
Joomla! Project Joomla! CMS 3.0.0-5.4.6, 6.0.0-6.1.2

Referencias y parches

Coincidencias CPE (NVD) (2)
  • cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:* ≥ 3.0.0 < 5.4.8
  • cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:* ≥ 6.0.0 ≤ 6.1.3

CVE recientes del mismo producto — Joomla!

7.1Alta
CVE-2026-92231

Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3

Joomla! Project Joomla! CMS; Joomla! Project Joomla! Framework Filter package

Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - The checkAttribute method normalized an attribute value before testing it against the "javascript:" scheme regex, however…