An issue exists in Joomla! 1.7.0 up to and including 3.9.22. Lack of input validation while handling ACL rulesets can cause write ACL violations.
joomla joomla\\!