Joomla! 3.2.0 - 3.9.24 Multiple Vulnerabilities

Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...

CVE-2021-23128

CVE-2021-23128 affects Joomla! core 3.2.0 through 3.9.24, where the unused FOFEncryptRandval path used an insecure randval implementation. The issue has been mitigated by replacing that code with a call to random_bytes() and its backport shipped in random_compat. Multiple connected sources confir...