CVE-2024-27185

The class responsible for pagination (page navigation) includes user-supplied parameters in constructed URLs without proper verification. An attacker can craft an HTTP request containing malicious parameters that will be embedded in pagination links and subsequently stored in the server's cache or intermediate caching servers. This mechanism corresponds to CWE-444 classification (inconsistent interpretation of HTTP requests), enabling manipulation of content served to other users from cache.

An attacker can cause cache poisoning, resulting in serving manipulated content to unsuspecting users and potentially disrupting service availability by invalidating or overwriting correct cache entries.

Apply patches available from the vendor in accordance with the references: https://developer.joomla.org/security-centre/942-20240802-core-cache-poisoning-in-pagination.html

Joomla! — versions indicated in the vendor references (security bulletin 20240802)