Lucene search

K
cvelistJoomlaCVELIST:CVE-2023-23755
HistoryMay 30, 2023 - 4:12 p.m.

CVE-2023-23755 [20230502] - Core - Bruteforce prevention within the mfa screen

2023-05-3016:12:32
Joomla
www.cve.org
2
joomla
mfa
bruteforce
rate limiting
security issue

EPSS

0.001

Percentile

43.1%

An issue was discovered in Joomla! 4.2.0 through 4.3.1. The lack of rate limiting allowed brute force attacks against MFA methods.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Joomla! CMS",
    "vendor": "Joomla! Project",
    "versions": [
      {
        "status": "affected",
        "version": "4.2.0-4.3.1"
      }
    ]
  }
]

EPSS

0.001

Percentile

43.1%

Related for CVELIST:CVE-2023-23755