CVE-2021-23128

Name of the Vulnerable Software and Affected Versions Joomla! versions 3.2.0 through 3.9.24

Description An issue was discovered in the core shipped but unused randval implementation within FOF (FOFEncryptRandval), which used a potentially insecure implementation. This has been replaced with a call to random bytes() and its backport that is shipped within random compat.

Recommendations For Joomla! versions 3.2.0 through 3.9.24, update the randval implementation to use random bytes() to ensure secure random number generation.