CVE-2021-23132: 
Joomla vulnerability analysis and mitigation

An issue was discovered in Joomla! versions 3.0.0 through 3.9.24 where com_media allowed paths that were not intended for image uploads. The vulnerability was discovered on February 17, 2020, and was fixed on March 2, 2021, with the release of version 3.9.25. This security issue was assigned CVE-2021-23132 and was classified as having moderate impact with low severity (Joomla Security).

The vulnerability stems from improper input validation in the com_media component of Joomla!, which allowed access to paths that should not have been accessible for image uploads. The issue affects the media management functionality of the content management system (CVE Details).

While classified as having moderate impact with low severity, the vulnerability could potentially allow unauthorized access to paths not intended for image uploads, which might lead to security implications for affected Joomla! installations (Joomla Security).

The vulnerability was addressed in Joomla! version 3.9.25. Users running affected versions (3.0.0 through 3.9.24) should upgrade to version 3.9.25 or later to mitigate this security issue (Joomla Security).