CVE-2026-78079 - CVSS, EPSS & CISA Kev 상세 정보 | CVE Find

CVE 설명

Joomla Extension - joomshaper.com - Open Redirect via Base64 Return Parameter in Helix Ultimate < 2.2.10 - Return redirect parameters accepted arbitrary Base64 strings without verifying whether the resolved target was an internal site URL via Uri::isInternal.

CVE 정보

관련 약점

CWE-ID	약점 이름	출처
CWE-601	URL Redirection to Untrusted Site The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

참고 자료

https://www.joomshaper.com/joomla-templates/helixultimate