What is CVE-2023-23752?

CVE-2023-23752 is a medium-severity vulnerability affecting Joomla! CMS versions 4.0.0 through 4.2.7. This issue allows unauthorized access to webservice endpoints due to an improper access check. Websites and web applications running on the affected Joomla! versions are at risk, making it crucial for administrators to address this vulnerability to maintain security.

Who is impacted?

If you're using Joomla! CMS versions 4.0.0 to 4.2.7, you may be affected by the CVE-2023-23752 vulnerability. This issue allows unauthorized access to webservice endpoints due to an improper access check, potentially putting your website or web application at risk. It's important to be aware of this vulnerability and take necessary precautions to maintain the security of your online presence.

What to do if CVE-2023-23752 affected you

If you're affected by the CVE-2023-23752 vulnerability, it's crucial to take action to secure your website or web application. To mitigate this issue, follow these simple steps:

1. Upgrade your Joomla! CMS to version 4.2.8.

2. Review and update your internal vulnerability management procedures.

3. Monitor for any suspicious activity on your website or web application.

Is it in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-23752 vulnerability, also known as the Joomla! Improper Access Control Vulnerability, is indeed listed in CISA's Known Exploited Vulnerabilities Catalog. It was added on January 8, 2024, with a due date of January 29, 2024. The required action is to apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as NVD-CWE-Other, which refers to an improper access check issue in Joomla! CMS versions 4.0.0-4.2.7.

Learn More

CVE-2023-23752 highlights the importance of staying informed about vulnerabilities and taking necessary precautions to maintain security. For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, refer to the NVD page or the resources listed below.

• Joomla! Developer Network Security Announcement

• BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities

• Known Exploited Vulnerabilities Catalog

• CVE Record | CVE