high7.5
CVE-2025-25227
Joomla CMS Multi-Factor Authentication Bypass
Impact
Insufficient state checks lead to a vector that allows to bypass 2FA checks.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | joomla/joomla-cms | >= 5.0.0, < 5.2.6 | 5.2.6 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla\! | from 4.0.0 before 4.4.13 from 5.0.0 before 5.2.6 |