← Back to CVEs
CVE-2023-23752
MEDIUMCISA KEV5.3
Description
An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.
CVE Details
CVSS v3.1 Score5.3
SeverityMEDIUM
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack VectorNETWORK
ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
Published2/16/2023
Last Modified10/24/2025
Sourcekev
Honeypot Sightings0
CISA KEV
VendorJoomla!
ProductJoomla!
Vulnerability NameJoomla! Improper Access Control Vulnerability
KEV Date Added2024-01-08
Remediation Due Date2024-01-29
Ransomware UseUnknown
Affected Products
joomla:joomla\!
Weaknesses (CWE)
CWE-284
References
https://developer.joomla.org/security-centre/894-20230201-core-improper-access-check-in-webservice-endpoints.html(security@joomla.org)
https://developer.joomla.org/security-centre/894-20230201-core-improper-access-check-in-webservice-endpoints.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-23752(134c704f-9b21-4f2e-91b3-4a467353bcc0)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.