VYPR
← All advisories
Critical severity9.1NVD Advisory· Published Mar 4, 2021· Updated Jun 17, 2026

CVE-2021-23128

CVE-2021-23128

Description

An issue was discovered in Joomla! 3.2.0 through 3.9.24. The core shipped but unused randval implementation within FOF (FOFEncryptRandval) used an potential insecure implemetation. That has now been replaced with a call to 'random_bytes()' and its backport that is shipped within random_compat.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Joomla/Joomla!3 versions
    cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*range: >=3.2.0,<3.9.25
    • (no CPE)range: 3.2.0 - 3.9.24
    • (no CPE)range: 3.2.0-3.9.24
  • osv-coords
    pkg:bitnami/joomla
    Range: >= 3.2.0, < 3.9.25

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.