{"uuid": "2046afaf-7c02-473d-8a2b-8994dc7b7032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23752", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/joomla_api_improper_access_checks.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"h00die\", \"Tianji Lab\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Joomla versions between 4.0.0 and 4.2.7, inclusive, contain an improper API access vulnerability.\\n          This vulnerability allows unauthenticated users access to webservice endpoints which contain\\n          sensitive information. Specifically for this module we exploit the users and config/application\\n          endpoints.\\n\\n          This module was tested against Joomla 4.2.7 running on Docker.\", \"disclosure_date\": \"2023-02-01\", \"fullname\": \"auxiliary/scanner/http/joomla_api_improper_access_checks\", \"is_install_path\": true, \"mod_time\": \"2023-04-20 16:23:52 +0000\", \"name\": \"Joomla API Improper Access Checks\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/joomla_api_improper_access_checks.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/joomla_api_improper_access_checks\", \"references\": [\"EDB-51334\", \"URL-https://developer.joomla.org/security-centre/894-20230201-core-improper-access-check-in-webservice-endpoints.html\", \"URL-https://nsfocusglobal.com/joomla-unauthorized-access-vulnerability-cve-2023-23752-notice/\", \"URL-https://attackerkb.com/topics/18qrh3PXIX/cve-2023-23752\", \"CVE-2023-23752\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:35.521926Z"}