The InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key.
History

Tue, 26 May 2026 17:00:00 +0000

Type Values Removed Values Added
Description The InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key.
Title Joomla! Core - [20260517] - Incorrect Cache Key Construction for InputFilter objects
References

cve-icon MITRE

Status: PUBLISHED

Assigner: Joomla

Published:

Updated: 2026-05-26T16:42:41.476Z

Reserved: 2026-05-26T10:06:17.656Z

Link: CVE-2026-48901

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Undergoing Analysis

Published: 2026-05-26T17:16:54.880

Modified: 2026-05-26T19:06:58.447

Link: CVE-2026-48901

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.