CVE-2023-39974

—

CVSS 3.1

5.3 medium

EPSS

<1%p42

Published

Aug 17, 2023 (Aug 17, 2023)

Modified

Jun 17, 2026

Description

Exposure of Sensitive Information vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized actors to get the number of subscribers in a specific list.

Vendors: acymailing
Products: acymailing
Ecosystems: Joomla
Weakness: CWE-200, CWE-668
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.