CVE-2022-23798: 
Joomla vulnerability analysis and mitigation

A security vulnerability (CVE-2022-23798) was discovered in Joomla! versions 2.5.0 through 3.10.6 and 4.0.0 through 4.1.0. The vulnerability was reported on March 23, 2021, and fixed on March 29, 2022. The issue involves inadequate validation of URLs that could result in an invalid check whether a redirect URL is internal or not (Joomla Security).

The vulnerability is classified as having Low Severity and Low Impact, with Low Probability of exploitation. It specifically relates to an open redirect vulnerability due to insufficient URL validation mechanisms in the Joomla core (Joomla Security).

The vulnerability could potentially lead to open redirect attacks, where malicious actors could bypass the internal URL validation checks. This could result in users being redirected to unexpected or potentially harmful external websites (Joomla Security).

The vulnerability has been patched in Joomla! versions 3.10.7 and 4.1.1. Users running affected versions are advised to upgrade to these patched versions to mitigate the security risk (Joomla Security).