Back to the CVE list
CVE-2023-23752 CISA KEV · Actively exploited

Joomla! Improper Access Control Vulnerability

CVSS score

—

EPSS probability

%99.8

Risk score

—

Published

2 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Joomla! < 4.2.8 - Unauthenticated information disclosure (★16)

Public PoCSource updated: 27.03.2023 13:43:36

Bulk scanner + get config from CVE-2023-23752 (★4)

Public PoCSource updated: 16.03.2023 03:05:00

开源,go多并发批量探测poc,准确率高 (★2)

Public PoCSource updated: 10.03.2023 22:33:53

This Python implementation serves an educational purpose by demonstrating the exploitation of CVE-2023-23752. The code provides insight into the vulnerability's exploitation. (★2)

Public PoCSource updated: 04.12.2023 09:38:08

Joomla! 未授权访问漏洞 (★1)

Public PoCSource updated: 18.02.2023 12:49:51

Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints. (★1)

Public PoCSource updated: 22.02.2023 18:59:00

CVE-2023-23752 poc (★1)

Public PoCSource updated: 23.02.2023 10:48:23

未授权访问漏洞 (★1)

Public PoCSource updated: 23.02.2023 16:16:25

Joomla Unauthorized Access Vulnerability (CVE-2023-23752) Dockerized (★1)

Public PoCSource updated: 25.03.2023 15:40:40

Perform with Dork Scanner and Massive with Joomla 4.2.8 (★1)

Public PoCSource updated: 09.04.2023 22:58:26

Joomla未授权访问漏洞 (★1)

Public PoCSource updated: 16.06.2023 17:14:59

CVE-2023-23752 nuclei template (★0)

Public PoCSource updated: 18.02.2023 21:19:24

Poc for CVE-2023-23752 (joomla CMS) (★0)

Public PoCSource updated: 19.02.2023 06:25:43

Poc for CVE-2023-23752 (joomla CMS) (★0)

Public PoCSource updated: 29.12.2023 19:29:12

Joomla! v4.2.8 - Unauthenticated information disclosure

Exploit referenceSource updated: 08.04.2023 00:00:00

Nuclei: Joomla! Webservice - Password Disclosure

Exploit reference

0xWhoami35/CVE-2023-23752

Public PoC

A bash automation that exploits the vulnerable endpoints for the Joomla! API 4.0 - 4.2.7

Public PoC

Python port of the CVE-2023-23752 exploit — Joomla! < 4.2.8 unauthenticated information disclosure (user list + DB credentials leak)

Public PoC

Vulhub joomla/CVE-2023-23752: Joomla Webservice Improper Access Check (CVE-2023-23752), run with Isoloom

Public PoC

python 2.7

Public PoC

Joomla 4.1.0 exploit

Public PoC

Traveller is an Easy Linux machine featuring a Joomla 4.2.7 travel booking website vulnerable to CVE-2023-23752, an unauthenticated REST API information disclosure that leaks database credentials, leading to admin panel access, remote code execution, and root via sudo misconfiguration.

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-23752"