Description

An issue was discovered in Joomla! 4.0.0 through 4.1.0. Under specific circumstances, JInput pollutes method-specific input bags with $_REQUEST data.

Remediation

References

CVE-2022-23799

Related Vulnerabilities

Oracle Application Server CVE-2008-2589 Vulnerability (CVE-2008-2589)

Apache HTTP Server Other Vulnerability (CVE-2005-2728)

WordPress Other Vulnerability (CVE-2005-4463)

PHP Numeric Errors Vulnerability (CVE-2015-4022)

Moodle CVE-2021-40695 Vulnerability (CVE-2021-40695)

Severity

Critical

Classification

CVE-2022-23799

Tags

Missing Update Known Vulnerabilities