CVE-2021-23128 – An issue was discovered in Joomla! 3.2.0 through 3.9.24. The core shipped but unused randv …

Vuln ID: CVE-2021-23128

Published:  2021-03-04  18:15:13Z

Description: An issue was discovered in Joomla! 3.2.0 through 3.9.24. The core shipped but unused randval implementation within FOF (FOFEncryptRandval) used an potential insecure implemetation. That has now been replaced with a call to ‘random_bytes()’ and its backport that is shipped within random_compat.

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):