CVE-2022-23797: 
Joomla vulnerability analysis and mitigation

A SQL injection vulnerability (CVE-2022-23797) was discovered in Joomla! versions 3.0.0 through 3.10.6 and 4.0.0 through 4.1.0. The vulnerability was reported on March 4, 2021, and fixed on March 29, 2022. The issue stems from inadequate filtering on the selected IDs in requests (Joomla Security).

The vulnerability has been assigned a CVSS v3 base score of 9.8 (Critical), with an impact score of 5.9 and exploitability score of 3.9. The attack vector is Network-based, requires low attack complexity, needs no privileges, and can be executed without user interaction. The vulnerability affects confidentiality, integrity, and availability, all with high impact ratings (AttackerKB).

The SQL injection vulnerability could potentially allow attackers to access, modify, or delete database contents, leading to unauthorized data access, data manipulation, and possible system compromise. The high CVSS scores across confidentiality, integrity, and availability indicate severe potential consequences if exploited (AttackerKB).

The vulnerability has been patched in Joomla! versions 3.10.7 and 4.1.1. Users running affected versions should upgrade immediately to these or later versions to mitigate the risk (Joomla Security).