[20220307] - Core - Variable Tampering on JInput $_REQUEST data
CVE-2022-23799
9.8CRITICAL
What is CVE-2022-23799?
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Under specific circumstances, JInput pollutes method-specific input bags with $_REQUEST data.
Affected Version(s)
Joomla! CMS 4.0.0-4.1.0
joomla/input 2.0.0-2.0.1