Vulnerability details
CVE-2023-23752
Actively exploited
Joomla! Project Joomla! CMSjoomla joomla\!
[20230201] - Core - Improper access check in webservice endpoints
CVSS 3.1
5.3Medium
Official description
An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 5.3Medium | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Joomla! Project | Joomla! CMS | 4.0.0-4.2.7 | CVEProject cvelistV5 (CNA) |
| joomla | joomla\! | 4.0.0 ≤ v ≤ 4.2.7 | CISA ADP / Vulnrichment |
References and advisories
2
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2023-02-16
- Last updated
- 2026-02-26
- State
- Published
- Assigner (CNA)
- Joomla
- Kolun priority
- 83 · Critical
CISA KEV catalog
- Date added
- 2024-01-08
- Due date
- 2024-01-29
- Used in ransomware
- Unknown
Exploit prediction (EPSS)
99.8%
Probability of exploitation in 30 days
99.9%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- Active
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-284Improper Access Control