Firetruck

CVE-2023-23752

KEV

Joomla! Improper Access Control Vulnerability

View CVE record →
Vendor / Project
Joomla!
Product
Joomla!
Date added
Jan 8, 2024
Due date
Jan 29, 2024
Known ransomware use
Unknown
CWEs
CWE-284

Description

Joomla! contains an improper access control vulnerability that allows unauthorized access to webservice endpoints.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes