[20230502] - Core - Bruteforce prevention within the mfa screen

CVE-2023-23755

What is CVE-2023-23755?

A vulnerability in Joomla! versions 4.2.0 to 4.3.1 allows attackers to exploit the lack of rate limiting on multi-factor authentication (MFA) methods, potentially facilitating brute force attacks. This issue highlights critical shortcomings in the platform's authentication mechanisms, urging users to implement additional security measures until a patch is applied. Joomla! developers have acknowledged this vulnerability and provided guidance for mitigating the risks associated with this flaw.

References