VULNERABILITY INTELLIGENCE

CVE-2021-23127

CVSS score9.1 CRITICAL
EPSS probability1.38%
CISA KEVNot currently listed
Published2021-03-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of an insufficient length for the 2FA secret accoring to RFC 4226 of 10 bytes vs 20 bytes.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references