Skip to content
OpenAdvisories
Medium · 6.3 CVE-2024-21722 EUVD-2024-19338GHSA-h4pg-prwh-f695

[20240201] - Core - Insufficient session expiration in MFA management views

Published Feb 20, 2024 · Updated Nov 3, 2024 · Assigned by Joomla

Vendor: Joomla! Project Product: Joomla! CMS Category: Web / CMS

Description

The MFA management features did not properly terminate existing user sessions when a user's MFA methods have been modified.

Affected products

VendorProductAffectedFixed
Joomla! Project Joomla! CMS 3.2.0-3.10.14, 4.0.0-4.4.2, 5.0.0-5.0.2 —

Advisories 1

References