CVE-2025-25227

[20250402] - Joomla Core - MFA Authentication Bypass PUBLISHED

Description (CNA)

Insufficient state checks lead to a vector that allows to bypass 2FA checks.

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 4.0.0-4.4.12; affected 5.0.0-5.2.5

CWE-287

CISA-ADP

No English description supplied.

No references supplied.