CVE Catalog
CVE-2023-39974
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.42%
34th percentile - higher than 34% of all known CVEs
Summary
A vulnerability in the AcyMailing Enterprise component for Joomla allows unauthorized actors to obtain the number of subscribers in a specific list.
Risk Assessment
The organization may be exposed to the disclosure of sensitive information, potentially leading to further attacks or privacy breaches.
Recommendation
It is recommended to update the AcyMailing Enterprise component to the latest version and implement appropriate measures to secure access to subscriber data.
Original NVD description (English source)
Exposure of Sensitive Information vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized actors to get the number of subscribers in a specific list.