jeneralmotors/cve-2023-23752
An access control flaw was identified, potentially leading to unauthorized access to critical webservice endpoints within Joomla! CMS versions 4.0.0 through 4.2.7. This vulnerability could be exploited by attackers to gain unauthorized access to sensitive information or perform unauthorized actions.
This repository contains Python and Bash scripts that serve as ports of the original Proof of Concept (PoC) written in Ruby for the vulnerability CVE-2023-23752 in Joomla! CMS versions 4.0.0 through 4.2.7 made by 'noraj' (Alexandre ZANNI). An access control flaw was identified, potentially leading to unauthorized access to critical webservice endpoints. This vulnerability could be exploited by attackers to gain unauthorized access to sensitive information or perform unauthorized actions.
./CVE-2023-23752.sh http://example.com
python CVE-2023-23752.py -u example.com
| Option | Description |
|---|---|
-u, --url | URL to scan |
-f, --file | Path to the file containing URLs to scan |
-o, --output_file | Path to the output file (optional) |
-e, --endpoint | Endpoint to scan (default: /api/index.php/v1/config/application?public=true) |
-t, --timeout | Timeout in seconds (default: 2) |
-m, --max_threads | Maximum number of threads (default: 10) |
Important: These scripts are provided for educational purposes only. Use them at your own risk. The author assumes no responsibility for any misuse or damage caused by these scripts. Ensure that you have explicit permission to test the target system for vulnerabilities before using these scripts in any environment.