PT-2025-15469 · Joomla · Joomla!

Published 2025-04-08 · Updated 2025-06-05 · CVE-2025-25227

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Joomla versions up to 4.4.12 and 5.2.5

Description: The issue is related to insufficient state checks, which create a vector allowing attackers to bypass 2FA checks. This leads to improper authentication.

Recommendations: For Joomla versions up to 4.4.12, update to a version later than 4.4.12 to resolve the issue. For Joomla versions up to 5.2.5, update to a version later than 5.2.5 to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BIT-JOOMLA-2025-25227

CVE-2025-25227

GHSA-6423-85CC-8GF6

Affected Products

Joomla!

References · 11

• https://developer.joomla.org/security-centre/964-20250402-core-mfa-authentication-bypass.html · Vendor Advisory
• https://osv.dev/vulnerability/BIT-joomla-2025-25227 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6423-85cc-8gf6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-25227 · Security Note
• https://osv.dev/vulnerability/CVE-2025-25227 · Vendor Advisory
• https://github.com/joomla/joomla-cms · Note
• https://twitter.com/WolfgangSesin/status/1909659583712215533 · Twitter Post
• https://twitter.com/syedaquib77/status/1910694999383060956 · Twitter Post
• https://twitter.com/CVEnew/status/1909649335618318713 · Twitter Post
• https://twitter.com/zoomeye_team/status/1910535814343516462 · Twitter Post
• https://t.me/cvedetector/22487 · Telegram Post