CVE-2023-23752 PoC — [20230201] - Core - Improper access check in webservice endpoints

Source

https://github.com/Youns92/Joomla-v4.2.8---CVE-2023-23752

Associated Vulnerability

Title: [20230201] - Core - Improper access check in webservice endpoints (CVE-2023-23752)
Description:An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

Description

CVE-2023-23752

Readme

# Joomla! v4.2.8 - Unauthenticated Information Disclosure Exploit Script
This Bash script exploits an unauthenticated information disclosure vulnerability in Joomla! versions 4.0.0 to 4.2.8.

```bash
sudo apt-get update                           
sudo apt-get install jq

./exploit.sh http://example.com

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →