CVEブラウザに戻る

CVE-2023-23752

🔥 Known Exploited (CISA KEV)MEDIUM

5.3

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-02-16

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

Affected Platforms (CPE)

📦

Joomla

Joomla\!

>= 4.0.0 and < 4.2.8

References & Advisories

🔗 https://developer.joomla.org/security-centre/894-20230201-core-improper-access-check-in-webservice-endpoints.html

🔗 https://developer.joomla.org/security-centre/894-20230201-core-improper-access-check-in-webservice-endpoints.html

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-23752

関連する脆弱性情報

CVE-2026-657656.9

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save ...

CVE-2026-657645.1

Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Commander 5.0.0-6.1.1 - Improper validation of user inputs lead...

CVE-2026-657578.1

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor ...

CVE-2026-657136.5

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate uninten...