Unrated severityNVD Advisory· Published Mar 4, 2021· Updated Feb 25, 2026
[20210302] - Core - Potential Insecure FOFEncryptRandval
CVE-2021-23128
Description
An issue was discovered in Joomla! 3.2.0 through 3.9.24. The core shipped but unused randval implementation within FOF (FOFEncryptRandval) used an potential insecure implemetation. That has now been replaced with a call to 'random_bytes()' and its backport that is shipped within random_compat.
Affected products
1- Range: 3.2.0-3.9.24
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- developer.joomla.org/security-centre/842-20210302-core-potential-insecure-fofencryptrandval.htmlmitrex_refsource_MISCvendor-advisory
News mentions
0No linked articles in our index yet.