CVE-2023-39972

MEDIUM

AcyMailing 6.7.0-8.7.0 - Unauthenticated Improper Access Control

Title source: llm

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to create new mailing lists.

Core 2

Core References

Product product

Release Notes, Vendor Advisory vendor-advisory

CVSS v3 4.3

EPSS 0.0033

EPSS Percentile 25.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-284

Status published

Products (1)

acymailing/acymailing 6.7.0 - 8.7.0

Published Aug 17, 2023

Tracked Since Feb 18, 2026