CVE-2023-23752 — Joomla! Improper Access Control Vulnerability

provenance: imported · CVE: CVE-2023-23752

CVE-2023-23752: Joomla! Improper Access Control Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Joomla!
Product	Joomla!
Date added	2024-01-08
Due date	2024-01-29
Ransomware campaign use	Unknown

Description

Joomla! contains an improper access control vulnerability that allows unauthorized access to webservice endpoints.

Required action (CISA)

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://developer.joomla.org/security-centre/894-20230201-core-improper-access-check-in-webservice-endpoints.html; https://nvd.nist.gov/vuln/detail/CVE-2023-23752

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-23752
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog