CVE-2025-54477

The Joomla! core software is vulnerable to a user enumeration vector due to improper handling of authentication requests within the passkey authentication method . This flaw allows an attacker to potentially identify valid users. The vulnerability affects Joomla! 4.x prior to 4.4.14 and 5.x prior...