- Project: Joomla!
- SubProject: CMS
- Impact: High
- Severity: Low
- Probability: Low
- Versions: 2.5.0 - 3.10.6 & 4.0.0 - 4.1.0
- Exploit type: Incorrect Access Control
- Reported Date: 2020-09-23
- Fixed Date: 2022-03-29
- CVE Number: CVE-2022-23795
A user row was not bound to a specific authentication mechanism which could under very special circumstances allow an account takeover.
Joomla! CMS versions 2.5.0 - 3.10.6 & 4.0.0 - 4.1.0
Upgrade to version 3.10.7 or 4.1.1
The JSST at the Joomla! Security Centre.