CVE Catalog
CVE-2023-39970
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk0.88%
54th percentile - higher than 54% of all known CVEs
Summary
CVE-2023-39970 vulnerability affects the AcyMailing component for Joomla, allowing unrestricted upload of files with dangerous types, leading to remote code execution.
Risk Assessment
Exploitation of this vulnerability may lead to system takeover, posing a serious security threat to the organization.
Recommendation
It is recommended to update the AcyMailing component to the latest version and implement strict file upload policies.
Original NVD description (English source)
Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla. It allows remote code execution.