CVE-2023-23752 PoC — [20230201] - Core - Improper access check in webservice endpoints

Source

https://github.com/r3dston3/CVE-2023-23752

Associated Vulnerability

Title: [20230201] - Core - Improper access check in webservice endpoints (CVE-2023-23752)
Description:An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

Readme

This is a POC for CVE-2023-23752 written in Python that displays username and password information.

CVE-2023-23752 (Joomla! 4.0.0 < 4.2.8)

`Usage` = python3 exploit.py

The execution of the script is demonstrated in the GIF below:
![Example 1](img/poc.gif)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →