Joomla! 3.2.0 - 3.9.24 Multiple Vulnerabilities

Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...

CVE-2021-23127

CVE-2021-23127 affects Joomla! 3.2.0 through 3.9.24, where the 2FA secret generation uses an insufficient length (10 bytes instead of 20 bytes per RFC 4226). This vulnerability could impact authentication-related hashes/secrets. The connected docs indicate the issue lies in inadequate randomness/...