Lucene search
HistoryAug 17, 2023 - 9:15 p.m.
CVE-2023-39972
cve-2023-39972
improper access control
acymailing enterprise
joomla
unauthorized access
mailing lists
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
4.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.0%
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to create new mailing lists.
Affected configurations
Node
acymailingacymailingRange6.7.0–8.7.0enterprisejoomla\!
| CPE | Name | Operator | Version |
|---|---|---|---|
| acymailing:acymailing | acymailing | lt | 8.7.0 |
CNA Affected
[
{
"collectionURL": "https://extensions.joomla.org/extension/acymailing-starter/",
"defaultStatus": "unaffected",
"packageName": "com_acymailing",
"product": "AcyMailing Enterprise component for Joomla",
"vendor": "acymailing.com",
"versions": [
{
"status": "affected",
"version": "6.7.0-8.6.3"
}
]
}
]Related
osv
osv
CVE-2023-39972
2023-08-17 21:15:09
cvelist
cvelist
nvd
nvd
CVE-2023-39972
2023-08-17 21:15:09
prion
prion
Improper access control
2023-08-17 21:15:00
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
4.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.0%
Related for CVE-2023-39972