CVE-2022-23793: 
PHP vulnerability analysis and mitigation

CVE-2022-23793 is a path traversal vulnerability discovered in Joomla! versions 3.0.0 through 3.10.6 and 4.0.0 through 4.1.0. The vulnerability, identified on January 20, 2022, and fixed on March 29, 2022, allows attackers to write files outside of the intended path by exploiting a flaw in the tar package extraction process (Joomla Security).

The vulnerability is classified as a Zip Slip vulnerability within the Tar extractor component of Joomla. It has been assigned a CVSS v3.1 score of 5.3 (Medium) and CVSS v2.0 score of 5.0 (Medium). The issue specifically relates to the extraction of specially crafted tar packages that could result in files being written outside the intended directory path (NVD).

When exploited, this vulnerability allows an attacker to write files outside of the intended path during the extraction of specially crafted tar packages, potentially leading to unauthorized file manipulation on the affected system (Joomla Security).

The vulnerability has been patched in Joomla versions 3.10.7 and 4.1.1. Users running affected versions are strongly advised to upgrade to these patched versions to mitigate the risk (Joomla Security).