CVE-2023-39974 Extension - acymailing.com - Exposure of Sensitive Information in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3

2023-08-1720:06:39

CWE-200

Joomla

www.cve.org

cve-2023-39974

extension

acymailing.com

sensitive information

acymailing enterprise

joomla

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

30.6%

JSON

Exposure of Sensitive Information vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized actors to get the number of subscribers in a specific list.

CNA Affected

[
  {
    "collectionURL": "https://extensions.joomla.org/extension/acymailing-starter/",
    "defaultStatus": "unaffected",
    "packageName": "com_acymailing",
    "product": "AcyMailing Enterprise component for Joomla",
    "vendor": "acymailing.com",
    "versions": [
      {
        "status": "affected",
        "version": "6.7.0-8.6.3"
      }
    ]
  }
]