CVE-2023-23755

7.5 highEPSS 0.6%

High (7.5) in joomla joomla\!. EPSS 0.6% chance of exploitation in the next 30 days.

An issue was discovered in Joomla! 4.2.0 through 4.3.1. The lack of rate limiting allowed brute force attacks against MFA methods.

Severity

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-307
Published: 2023-05-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19