CVE 7.5 HIGH

Joomla! Core – [20260517] – Incorrect Cache Key Construction for InputFilter objects_CVE-2026-48901

7.5 / 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

The InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key.

Basic Information

ID CVE-2026-48901
Source Joomla
Published May 26, 2026 at 16:42
Modified May 28, 2026 at 13:20

Affected Product

Vendor Joomla! Project
Product Joomla! CMS
Version 4.0.0-5.4.5
Affected Versions Joomla! Project Joomla! CMS 4.0.0-5.4.5
Joomla! Project Joomla! CMS 6.0.0-6.1.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.