Home

Description

Insufficient state checks lead to a vector that allows to bypass 2FA checks.

PUBLISHED Reserved 2025-02-04 | Published 2025-04-08 | Updated 2025-04-21 | Assigner Joomla

Problem types

CWE-287 Improper Authentication

Product status

Default status
unaffected

4.0.0-4.4.12
affected

5.0.0-5.2.5
affected

References

developer.joomla.org/...-core-mfa-authentication-bypass.html vendor-advisory

cve.org (CVE-2025-25227)

nvd.nist.gov (CVE-2025-25227)

Download JSON