CVE-2023-39972
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to create new mailing lists.
Risk Assessment
The organization may be exposed to unauthorized actions, potentially leading to data leaks or unauthorized dissemination of information.
Recommendation
It is recommended to implement appropriate access control mechanisms and update the AcyMailing Enterprise component to the latest version.
Other vulnerabilities in AcyMailing Enterprise for Joomla
See all- CVE-2023-39974Medium
A vulnerability in the AcyMailing Enterprise component for Joomla allows unauthorized actors to obtain the number of subscribers in a specific list.
- CVE-2023-39973Medium
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal of attachments from campaigns.
- CVE-2023-39971Medium
CVE-2023-39971 describes an improper neutralization of input during web page generation vulnerability in the AcyMailing Enterprise component for Joomla, allowing for XSS attacks. This issue affects versions 6.7.0-8.6.3 of the component.
Original NVD description (English source)
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to create new mailing lists.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS