Joomla CMS Multi-Factor Authentication Bypass

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-25227 · ADVISORY
• developer.joomla.org/security-centre/964-20250402-core-mfa-authentication-bypass.html · WEB
• joomla/joomla-cms · PACKAGE

joomla/joomla-cms のその他の脆弱性

• CVE-2019-16725中 6.1In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates.
• CVE-2019-7743緊急 9.8An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for objection injection attacks because there is no …
• CVE-2018-11326中 4.8An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the …
• CVE-2013-5583中 4.3Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary …
• CVE-2011-4332中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.6.3 and earlier allow remote attackers to inject arbitrary web script or HT…