CVE-2023-23752 PoC — Joomla 安全漏洞

Source

https://github.com/blacks1ph0n/CVE-2023-23752

Associated Vulnerability

Title:Joomla 安全漏洞 (CVE-2023-23752)
Description:Joomla是美国Open Source Matters团队的一套使用PHP和MySQL开发的开源、跨平台的内容管理系统(CMS)。 Joomla 4.0.0版本至4.2.7版本存在安全漏洞，该漏洞源于不正确的访问检查，允许对web服务端点进行未经授权的访问。

Description

Joomla Unauthorized Access Vulnerability

Readme

# CVE-2023-23752
## Joomla Unauthorized Access Vulnerability CVE-2023–23752 

This readme file provides information about the Joomla Unauthorized Access Vulnerability CVE-2023–23752 and how to detect. This vulnerability allows an attacker to bypass the Joomla access control system and gain unauthorized access to the backend of a Joomla website. The exploit takes advantage of the vulnerability to achieve this goal.

## Prequisite
    - Joomla website (versions 4.0.0 and 4.2.7)

## Vulnerability Detils
The Joomla Unauthorized Access Vulnerability (CVE-2023–23752) is a security vulnerability that allows an attacker to bypass the Joomla access control system and gain unauthorized access to the backend of a Joomla website. This vulnerability is caused by an insecure implementation of the access control system in Joomla.

## CVE-2023-23752
There is a nuclei template provided as a proof of concept.
a request is made to the endpoint ``joomla/api/index.php/v1/config/application?public=True`` to check for the vulnerability

File Snapshot


 [4.0K]  /data/pocs/ebf83e28791332a853affedbbf3771816ede4bb2
├── [1.3K]  CVE-2023–23752.yaml
└── [1.0K]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!