A security alert has been raised at the Joomla Developer site. A vulnerability has been found to exist in the “user” component of the popular OSS which allows attackers to forge a password reset. Joomla Developers have since developed a patch which is available from their website.

Versions affected: 1.5 – 1.5.5
Solution: Download the patch and Upgrade to 1.5.6 -> http://joomlacode.org/gf/project/joomla/frs/

More details about this vulnerability can be found on the following URL:
http://developer.joomla.org/security/news/241-20080801-core-password-remind-functionality.html