CVE-2023-39970 Extension - acymailing.com - RCE in AcyMailing component for Joomla 6.7.0-8.5.0

2023-08-1720:06:32

CWE-434

Joomla

www.cve.org

remote code execution

acymailing

joomla

file upload

AI Score

Confidence

High

EPSS

0.004

Percentile

73.9%

JSON

Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla. It allows remote code execution.

CNA Affected

[
  {
    "collectionURL": "https://extensions.joomla.org/extension/acymailing-starter/",
    "defaultStatus": "unaffected",
    "packageName": "com_acymailing",
    "product": "AcyMailing component for Joomla",
    "vendor": "acymailing.com",
    "versions": [
      {
        "status": "affected",
        "version": "6.7.0-8.5.0"
      }
    ]
  }
]

References

extensions.joomla.org/extension/acymailing-starter/