Security Advisory

CVE-2022-23795

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-03-30 15:20:26
Last updated 2026-02-25 05:05:47
Assigner Joomla
State PUBLISHED

Description

An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. A user row was not bound to a specific authentication mechanism which could under very special circumstances allow an account takeover.