joomla joomla CVE-2022-23798 is a vulnerability in Joomla
Published on March 30, 2022

[20220306] - Core - Inadequate validation of internal URLs
An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate validation of URLs could result into an invalid check whether an redirect URL is internal or not.

Vendor Advisory NVD


Products Associated with CVE-2022-23798

Want to know whenever a new CVE is published for Joomla? stack.watch will email you.

Joomla
 

Affected Versions

Joomla! Project Joomla! CMS Version 2.5.0-3.10.6 & 4.0.0-4.1.0 is affected by CVE-2022-23798

Exploit Probability

EPSS
0.03%
Percentile
9.44%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.