CVE-2023-23752 PoC — [20230201] - Core - Improper access check in webservice endpoints

Source

https://github.com/JohnDoeAnonITA/CVE-2023-23752

Associated Vulnerability

Title:[20230201] - Core - Improper access check in webservice endpoints (CVE-2023-23752)
Description:An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

Description

CVE-2023-23752 Data Extractor

Readme

# CVE-2023-23752
CVE-2023-23752 Data Extractor

## Build

    git clone https://github.com/JohnDoeAnonITA/CVE-2023-23752
    cd CVE-2023-23752
    go build .
  
  ## Usage

    CVE-2023-23752[.exe] [-h|--help] -u|--url "<value>" [-t|--type (1|2)]

## Help

       _           _         _
       /_  /_ _  / | _  _  /_/_  _  _
	(_//_// // //_.'/_//_'/ // //_// /
	CVE-2023-23752 Data Extractor v0.1


	Arguments:

	  -h  --help  Print help information
	  -u  --url   Url to retrive data. Ex http://examble.com or
	              http://examble.com/joomla-path
	  -t  --type  Select 1 for api/index.php/v1/config/application or 2 for
	              api/v1/config/application. Default: 1

![Screenshot](https://github.com/JohnDoeAnonITA/CVE-2023-23752/blob/main/cve.png?raw=true)

File Snapshot


 [4.0K]  /data/pocs/7723b91837339088be7706017ff970d3e724f5cd
├── [ 28K]  cve.png
├── [ 131]  go.mod
├── [ 597]  go.sum
├── [3.0K]  main.go
└── [ 776]  README.md

0 directories, 5 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!