CVE-2023-23752 PoC — [20230201] - Core - Improper access check in webservice endpoints

Source

https://github.com/mil4ne/CVE-2023-23752-Joomla-v4.2.8

Associated Vulnerability

Title:[20230201] - Core - Improper access check in webservice endpoints (CVE-2023-23752)
Description:An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

Readme

# CVE-2023-23752 - Joomla-v4.2.8 Unauthenticated information disclosure

## Prerequisites 
```bash
sudo apt-get install nlohmann-json3-dev
```

```bash
sudo apt-get install libcurl4-openssl-dev
```

##  Compile
```bash
g++ -o ejecutable cve.cpp -lcurl -std=c++17
```

## usage 

![usage](exploit.png)

File Snapshot


 [4.0K]  /data/pocs/545678f7eff53039d40d40f4e18d7c1be47d32d5
├── [3.1K]  CVE-2023-23752.cpp
├── [ 21K]  exploit.png
└── [ 300]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →