CVE Catalog

CVE-2023-39972

MediumCVSS 4.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.33%

25th percentile - higher than 25% of all known CVEs

Summary

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to create new mailing lists.

Risk Assessment

The organization may be exposed to unauthorized actions, potentially leading to data leaks or unauthorized dissemination of information.

Recommendation

It is recommended to implement appropriate access control mechanisms and update the AcyMailing Enterprise component to the latest version.

Original NVD description (English source)

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to create new mailing lists.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS