CVE-2023-23751

Summary

An issue was discovered in Joomla! 4.0.0 through 4.2.4. A missing ACL check allows non super-admin users to access com_actionlogs.

Affected Software

Weaknesses

• Incorrect Access Control

ADP Enrichment

CVE Program Container

Additional References

• https://developer.joomla.org/security-centre/891-20230102-core-missing-acl-checks-for-com-actionlogs.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://developer.joomla.org/security-centre/891-20230102-core-missing-acl-checks-for-com-actionlogs.html

• ←Previous
• Next→