Medium · 5.3 CVE-2025-54477 EUVD-2025-31747GHSA-ph37-2cqr-gfc5

Joomla! Core - [20250902] User-Enumeration in passkey authentication method

Published Sep 30, 2025 · Updated Oct 1, 2025 · Assigned by Joomla

Description

Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method.

Vendor	Product	Affected	Fixed
Joomla! Project	Joomla! CMS	4.0.0-4.4.13, 5.0.0-5.3.3	—

EUVD	v3.1	5.3
CISA-ADP	v3.1	5.3