CVE-2023-39972 Extension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3

2023-08-1720:06:39

CWE-284

Joomla

www.cve.org

access control

acymailing

joomla

vulnerability

unauthorized users

mailing lists

4.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

JSON

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to create new mailing lists.

CNA Affected

[
  {
    "collectionURL": "https://extensions.joomla.org/extension/acymailing-starter/",
    "defaultStatus": "unaffected",
    "packageName": "com_acymailing",
    "product": "AcyMailing Enterprise component for Joomla",
    "vendor": "acymailing.com",
    "versions": [
      {
        "status": "affected",
        "version": "6.7.0-8.6.3"
      }
    ]
  }
]