Lucene search
HistoryFeb 16, 2023 - 5:15 p.m.
CVE-2023-23752
joomla
security
access control
webservice
unauthorized access
cve-2023-23752
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5.5 Medium
AI Score
Confidence
High
0.944 High
EPSS
Percentile
99.2%
An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.
Affected configurations
Node
joomlajoomla\!Range4.0.0–4.2.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| joomla:joomla\! | joomla joomla! | le | 4.2.7 |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Joomla! CMS",
"vendor": "Joomla! Project",
"versions": [
{
"status": "affected",
"version": "4.0.0-4.2.7"
}
]
}
]Related
githubexploit
githubexploit
Exploit for CVE-2023-23752
2023-02-23 01:52:02
Exploit for CVE-2023-23752
2023-03-09 07:42:03
Exploit for CVE-2023-23752
2023-03-25 06:18:46
packetstorm
packetstorm
Joomla! 4.2.7 Unauthenticated Information Disclosure
2023-03-24 00:00:00
Joomla 4.2.8 Information Disclosure
2024-05-21 00:00:00
zdt
zdt
Joomla! 4.2.7 Unauthenticated Information Disclosure Exploit
2023-03-28 00:00:00
Joomla! v4.2.8 - Unauthenticated information disclosure Exploit
2023-04-08 00:00:00
Joomla 4.2.8 Information Disclosure Exploit
2024-05-22 00:00:00
metasploit
metasploit
Joomla API Improper Access Checks
2023-04-17 02:54:54
osv
osv
CVE-2023-23752
2023-02-16 17:15:10
openvas
openvas
Joomla! 4.0.0 - 4.2.7 Improper Access Check Vulnerability - Active Check
2023-02-24 00:00:00
Joomla! 4.0.0 - 4.2.7 Improper Access Check Vulnerability - Version Check
2023-02-17 00:00:00
prion
prion
Improper access control
2023-02-16 17:15:00
cvelist
cvelist
joomla
joomla
[20230201] - Core - Improper access check in webservice endpoints
2023-02-13 00:00:00
thn
thn
cisa_kev
cisa_kev
Joomla! Improper Access Control Vulnerability
2024-01-08 00:00:00
nessus
nessus
cnvd
cnvd
Unauthorized access vulnerability in Joomla!
2023-02-17 00:00:00
nvd
nvd
CVE-2023-23752
2023-02-16 17:15:10
attackerkb
attackerkb
CVE-2023-23752
2023-02-16 00:00:00
malwarebytes
malwarebytes
Joomla! vulnerability is being actively exploited
2024-01-12 16:10:07
exploitdb
exploitdb
Joomla! v4.2.8 - Unauthenticated information disclosure
2023-04-08 00:00:00
nuclei
nuclei
Joomla! Webservice - Password Disclosure
2023-02-17 09:11:40
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-04-28 18:58:54
wallarmlab
wallarmlab
Changes in OWASP API Security Top-10 2023RC | API Security Newsletter
2023-04-06 14:27:28
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5.5 Medium
AI Score
Confidence
High
0.944 High
EPSS
Percentile
99.2%
Related for CVE-2023-23752