CVE-2023-23752: [20230201] - Core - Improper access check in webservice endpoints
Published Feb 16, 2023
·Updated
An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.
Other sources
Joomla! contains an improper access control vulnerability that allows unauthorized access to webservice endpoints.
— CISA
Affected Software
3 affected components
Joomla! Joomla!
Joomla Joomla\!>=4.0.0<=4.2.7
Joomla Joomla\!>=4.0.0<4.2.8
Event History
Feb 16, 2023
CVE Published
via MITRE·04:25 PM
Data Sourced
via MITRE·04:25 PM
DescriptionWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Jan 8, 2024
Kev Listed
via CISA·12:00 AM
Known Exploited
via CISA·12:00 AM
Data Sourced
via CISA·12:00 AM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this Joomla issue?
The vulnerability ID for this Joomla issue is CVE-2023-23752.
2
What is the severity of CVE-2023-23752?
The severity of CVE-2023-23752 is medium with a severity value of 5.3.
3
What is the description of CVE-2023-23752?
CVE-2023-23752 is an issue in Joomla! 4.0.0 through 4.2.7 that allows unauthorized access to webservice endpoints due to an improper access check.
4
How does CVE-2023-23752 affect Joomla?
CVE-2023-23752 affects Joomla versions 4.0.0 through 4.2.7.
5
Is there a fix available for CVE-2023-23752?
Yes, a fix is available for CVE-2023-23752. It is recommended to update to the latest version of Joomla to mitigate this vulnerability.