[20230501] - Core - Open Redirect and XSS within the mfa select

CVE-2023-23754

6.1MEDIUM

Key Information

Vendor: Joomla
Status: Joomla! Cms
Vendor: CVE Published:; 30 May 2023

Summary

An issue was discovered in Joomla! 4.2.0 through 4.3.1. Lack of input validation caused an open redirect and XSS issue within the new mfa selection screen.

Affected Version(s)

Joomla! CMS = 4.2.0-4.3.1

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published.
May 30, 2023
Vulnerability Reserved.
Jan 17, 2023

Collectors

NVD DatabaseMitre Database

Credit

Srpopty from huntr.dev