CVE-2023-39974
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
A vulnerability in the AcyMailing Enterprise component for Joomla allows unauthorized actors to obtain the number of subscribers in a specific list.
Risk Assessment
The organization may be exposed to the disclosure of sensitive information, potentially leading to further attacks or privacy breaches.
Recommendation
It is recommended to update the AcyMailing Enterprise component to the latest version and implement appropriate measures to secure access to subscriber data.
Other vulnerabilities in AcyMailing Enterprise for Joomla
See all- CVE-2023-39973Medium
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal of attachments from campaigns.
- CVE-2023-39972Medium
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to create new mailing lists.
- CVE-2023-39971Medium
CVE-2023-39971 describes an improper neutralization of input during web page generation vulnerability in the AcyMailing Enterprise component for Joomla, allowing for XSS attacks. This issue affects versions 6.7.0-8.6.3 of the component.
Original NVD description (English source)
Exposure of Sensitive Information vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized actors to get the number of subscribers in a specific list.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS