Joomla-cms: [4.0] Error in High Security Password of users Joomla

[carlosjacomi]

Steps to reproduce the issue

Install Joomla using a user with a secure password like "Admin123456+"

Expected result

The user can enter into backend or frontend structure

Actual result

The user can't login

System information (as much as possible)

Joomla 4 Alpha 2

Additional comments

1- If I install Joomla with a password like "123", I can login without issues
2- If I after of login with a easy password change the password for "Admin123456+" then I can login without issues

[dgrammatiko]

Admin123456 is a secure password? TIL!!!

[carlosjacomi]

that was a example xD for explain it!. the structure of a password that isn't work is Mayus Letter(s)+Normal Letter(s)+ Number(s)+ Special Character(s)

[dgrammatiko]

This needs some investigation then. Can you narrow this to what chars break the password? (eg is it something from !@#$%^^&*_-+ )

[carlosjacomi]

Well i'm using a password in my website that works good with password like the example "Admin123456+" in the lastest version 3.8.3

[dgrammatiko]

Actually this needs do be debugged, I mean it can be js or the php filtering.
dolphin works like a charm for me : https://github.com/danielmiessler/SecLists/pull/155 :D

[Anu1601CS]

Please change Build to 4.0-dev

---

_{This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/19204.}

[ghost]

@Anu1601CS done.

[chetanmadaan]

I am able to re-product the same in the Joomla backend user manager as well where I use the password admin and it as strong and accepted.

[Quy]

Cannot replicate with password Admin123456+

[brianteeman]

Probably fixed with #20414 ?

[joomla-cms-bot]

Set to "closed" on behalf of @Quy by The JTracker Application at issues.joomla.org/joomla-cms/19204

[Quy]

Confirmed fix with #20414. Thanks.

---

_{This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/19204.}