BLACKOUT MAP

Joomla! · Joomla!

CVE-2023-23752

[20230201] - Core - Improper access check in webservice endpoints

Exploited in attacks Medium 5.3 Attack chance: 99.8%
Share

What it is

An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

CISA: Joomla! contains an improper access control vulnerability that allows unauthorized access to webservice endpoints.

What to do

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Deadline for US federal agencies: January 29, 2024

Added to the CISA list
January 8, 2024
Published
February 16, 2023
Severity
Medium 5.3 CVSS 3.1
Chance of attacks in the next 30 days (EPSS)
99.8% in the top 0.1% of all known vulnerabilities
Weakness
CWE-284
More details
NVD · CVE.org · CISA

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.