CVE-2023-23752
Assigner: Joomla
Published: 2023-02-16T16:25:21.003Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Joomla! CMS
vendor: Joomla! Project
versions: status: affected
version: 4.0.0-4.2.7
credits: type: finder
value: Zewei Zhang from NSFOCUS TIANJI Lab
datePublic: 2023-02-16T16:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: <p>An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.</p>
value: An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.
problemTypes: descriptions: description: ACL
source: discovery: UNKNOWN
title: [20230201] - Core - Improper access check in webservice endpoints
x_generator: engine: Vulnogram 0.1.0-dev