CVE-2023-23752Vulnerability
Joomla! Improper Access Control Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 2 years ago
CISA KEVAdded 8 Jan 2024
Fix due 29 Jan 2024
Used by ransomware: not knownCISA KEV catalogue
Fix due 29 Jan 2024
Used by ransomware: not knownCISA KEV catalogue
EPSS99.8%
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
Ace in the Hole: exposing GambleForce, an SQL injection gang“In one attack in Brazil, the attackers exploited CVE-2023-23752, a vulnerability in Joomla CMS, but they failed to exfiltrate any data”
Indicators reported together
named in the same reports- 212.60.5[.]129in 1 report
- hxxp://38.54.40[.]156:8888/supershell/compile/download/linuxamdx64in 1 report
- 38.54.40[.]156in 1 report
- dns-supports[.]onlinein 1 report
- windows.updates[.]wikiin 1 report
- cs[.]storein 1 report
- www.dns-supports[.]onlinein 1 report
- cobaltstrikepro[.]storein 1 report
- 37.128.246[.]50in 1 report
- 38.60.220[.]230in 1 report
- 130.162.156[.]51in 1 report
- 172.104.113[.]179in 1 report
- 123.118.226[.]80in 1 report
- 172.104.51[.]37in 1 report
Copy these 14 indicators · defanged
Thanks — we review every report.