User Enumeration Vulnerability in Passkey Authentication for Joomla

CVE-2025-54477

What is CVE-2025-54477?

A vulnerability exists in Joomla's passkey authentication method due to inadequate handling of authentication requests. This flaw allows attackers to perform user enumeration, enabling them to determine valid usernames by analyzing the server's responses to authentication attempts. This security issue could lead to further exploitation, making it crucial for Joomla users to address this vulnerability promptly to safeguard against potential attacks.

References