CVE-2023-39973
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal of attachments from campaigns.
Risk Assessment
The organization may lose important data related to marketing campaigns, which can lead to a loss of customer trust.
Recommendation
It is recommended to update the AcyMailing Enterprise component to the latest version and implement appropriate access controls.
Other vulnerabilities in AcyMailing Enterprise for Joomla
See all- CVE-2023-39974Medium
A vulnerability in the AcyMailing Enterprise component for Joomla allows unauthorized actors to obtain the number of subscribers in a specific list.
- CVE-2023-39972Medium
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to create new mailing lists.
- CVE-2023-39971Medium
CVE-2023-39971 describes an improper neutralization of input during web page generation vulnerability in the AcyMailing Enterprise component for Joomla, allowing for XSS attacks. This issue affects versions 6.7.0-8.6.3 of the component.
Original NVD description (English source)
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal of attachments from campaigns.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS