High severity7.5NVD Advisory· Published Apr 8, 2025· Updated Jun 17, 2026
CVE-2025-25227
CVE-2025-25227
Description
Insufficient state checks lead to a vector that allows to bypass 2FA checks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
joomla/joomla-cmsPackagist | >= 5.0.0, < 5.2.6 | 5.2.6 |
joomla/joomla-cmsPackagist | >= 4.0.0, < 4.4.13 | 4.4.13 |
Affected products
4- osv-coords2 versions
>= 4.0.0, < 5.2.6+ 1 more
- (no CPE)range: >= 4.0.0, < 5.2.6
- (no CPE)range: >= 5.0.0, < 5.2.6
Patches
Vulnerability mechanics
References
3- developer.joomla.org/security-centre/964-20250402-core-mfa-authentication-bypass.htmlnvdVendor AdvisoryWEB
- github.com/advisories/GHSA-6423-85cc-8gf6ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-25227ghsaADVISORY
News mentions
0No linked articles in our index yet.