CVE-2023-39973

Опубликовано: 17 авг. 2023

Источник: nvd

CVSS3: 4.3

EPSS Низкий

Описание

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal of attachments from campaigns.

Ссылки

https://extensions.joomla.org/extension/acymailing-starter/
Product
https://www.acymailing.com/acymailing-release-security-%F0%9F%94%90-news-updates/
Release Notes
Vendor Advisory
https://extensions.joomla.org/extension/acymailing-starter/
Product
https://www.acymailing.com/acymailing-release-security-%F0%9F%94%90-news-updates/
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:acymailing:acymailing:*:*:*:*:enterprise:joomla\!:*:*

Версия от 6.7.0 (включая) до 8.7.0 (исключая)

EPSS

Процентиль: 29%

0.00102

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-284

NVD-CWE-noinfo

Связанные уязвимости

GHSA-xvpp-5hc3-fp4m