CVE Catalog

CVE-2023-39973

MediumCVSS 4.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.33%

25th percentile - higher than 25% of all known CVEs

Summary

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal of attachments from campaigns.

Risk Assessment

The organization may lose important data related to marketing campaigns, which can lead to a loss of customer trust.

Recommendation

It is recommended to update the AcyMailing Enterprise component to the latest version and implement appropriate access controls.

Original NVD description (English source)

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal of attachments from campaigns.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS