CVE-2022-23799: [20220307] - Core - Variable Tampering on JInput $_REQUEST data
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Under specific circumstances, JInput pollutes method-specific input bags with $REQUEST data.
Other sources
Variable Tampering within joomla/input class
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-23799?
CVE-2022-23799 is a vulnerability related to variable tampering in the joomla/input class.
How does variable tampering occur within the joomla/input class?
Variable tampering within the joomla/input class occurs when an attacker is able to manipulate or modify values of variables used within the class.
What is the severity of CVE-2022-23799?
The severity of CVE-2022-23799 is not specified in the provided information.
How can I check if my software is affected by CVE-2022-23799?
If your software uses the joomla/input class version 2.0.0 up to 2.0.2, it may be affected by CVE-2022-23799. Please check your software's dependencies carefully.
How can I fix CVE-2022-23799?
To fix CVE-2022-23799, upgrade to a version of the joomla/input package that is beyond the vulnerable range (2.0.2 or higher).