Fiche vulnérabilité
CVE-2021-23128 : faille critique joomla joomla\! (CVSS 9.1)
Description
An issue was discovered in Joomla! 3.2.0 through 3.9.24. The core shipped but unused randval implementation within FOF (FOFEncryptRandval) used an potential insecure implemetation. That has now been replaced with a call to 'random_bytes()' and its backport that is shipped within random_compat.
En bref
- Sévérité
- Critique (CVSS 9.1)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Exploitation active
- Non signalée par la CISA
- Publication
- 4 mars 2021
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- joomla joomla\!