~ / search / GHSA-6423-85cc-8gf6

GHSA-6423-85cc-8gf6

Joomla CMS Multi-Factor Authentication Bypass

Source: GitHub Advisory Database (reviewed) High CVE-2025-25227

Packages

EcosystemPackageAffectedFixed in
Packagist joomla/joomla-cms >= 5.0.0, < 5.2.6 5.2.6
Packagist joomla/joomla-cms >= 4.0.0, < 4.4.13 4.4.13

Details

As written in the advisory (Markdown source, shown as plain text).

Insufficient state checks lead to a vector that allows to bypass 2FA checks.

References

External links from the advisory. They lead to third-party sites.