CVE-2023-39973

—

CVSS 3.1

4.3 medium

EPSS

<1%p33

Published

Aug 17, 2023 (Aug 17, 2023)

Modified

Jun 17, 2026

Description

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal of attachments from campaigns.

Vendors: acymailing
Products: acymailing
Ecosystems: Joomla
Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.