CVE-2023-23755

[20230502] - Core - Bruteforce prevention within the mfa screen

High · published May 30, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
45.8
In the wild
Unconfirmed
What it is

An issue was discovered in Joomla! 4.2.0 through 4.3.1. The lack of rate limiting allowed brute force attacks against MFA methods.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00560 · 45.8th percentile
Published
2023-05-30T16:12Z
EPSS history
Timeline
  • 30 MAY 16:12Z
    [20230502] - Core - Bruteforce prevention within the mfa screen
    cvelistv5