CVE-2023-23751 — Incorrect Authorization in Joomla !

CWE-863 — Incorrect Authorization3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.0%
top 99.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Joomla !Joomla! Project Joomla! CMS
Timeline
PublishedFeb 1
Latest updateFeb 2

Description

An issue was discovered in Joomla! 4.0.0 through 4.2.4. A missing ACL check allows non super-admin users to access com_actionlogs.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶NVDjoomla/joomla_!4.0.0 — 4.2.4
▶CVEListV5joomla!_project/joomla!_cms4.0.0-4.2.6

🔴Vulnerability Details

2
GHSA
GHSA-x524-wcvc-mf48: An issue was discovered in Joomla! 4↗2023-02-02
▶
CVEList
[20230102] - Core - Missing ACL checks for com_actionlogs↗2023-02-01
▶
CVE-2023-23751 — Incorrect Authorization in Joomla ! | cvebase