Horizon Alert
Summary of the vulnerability and why it matters
This advisory concerns a vulnerability in password and username reset features that could expose sensitive user information by creating unencrypted links under certain configurations. The primary concern is confirming the relevance and exposure of this issue within your environment.
- Unencrypted reset links could expose user data.
- Critical systems may be affected by this vulnerability.
- Confirm relevance and exposure for your organization.
Attack Path
How an attacker could exploit the issue
An attacker could exploit this vulnerability by sending a specially crafted link to a user, which, when clicked, would initiate a password or username reset process over an unencrypted connection. This occurs because the system fails to enforce SSL for these reset features under certain configurations, allowing sensitive information to be transmitted insecurely.
- No authentication required.
- User clicks a malicious link.
- Sensitive account data exposed.
Live Threat
Current exploitation, exposure, and threat context
When the "Force SSL" flag is not set, password and username reset links are created over plain HTTP, even for HTTPS connections. This could expose sensitive information during the reset process.
- User credentials and reset tokens at risk.
- Reset links sent over insecure HTTP.
- Unauthorized account access possible.
Operational Fix
Recommended remediation, mitigation, and detection steps
This vulnerability impacts password and username reset functionalities, which are critical for user account management. Responsibility likely falls to application owners, platform teams, and potentially security teams, depending on how the Joomla instances are managed and secured. The immediate priority is to identify all deployed instances, assess their exposure, and confirm ownership before planning remediation, especially for public-facing sites.
- Application or platform owners should lead.
- Verify instance reachability and criticality.
- Plan remediation based on risk assessment.
