CVE-2023-39974

Extension - acymailing.com - Exposure of Sensitive Information in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3

State: Published
Severity: Not scored
Published: Aug 17, 2023
Updated: Oct 20, 2024
Reserved: Aug 7, 2023

Read the record on cve.org

Description

Exposure of Sensitive Information vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized actors to get the number of subscribers in a specific list.

Scores

The record has no CVSS score.

Weaknesses

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Affected Products

Product	Versions
AcyMailing Enterprise component for Joomlaacymailing.com	6.7.0-8.6.3Affected

References

https://extensions.joomla.org/extension/acymailing-starter/product
https://www.acymailing.com/acymailing-release-security-%F0%9F%94%90-news-updates/vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.