CVE-2023-39972
- Source
- https://cve.org/CVERecord?id=CVE-2023-39972
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-39972.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-39972
- Published
- 2023-08-17T21:15:09.437Z
- Modified
- 2025-11-20T12:20:29.779988Z
- Severity
-
- 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to create new mailing lists.
- References
Affected packages
Git / github.com/acyba/acymailing
Affected ranges
- Type
- GIT
- Repo
- https://github.com/acyba/acymailing
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
v6.*
v6.13.1
v6.13.2
v6.13.3
v6.14.1
v6.15.0
v6.16.0
v6.16.1
v6.16.2
v6.16.3
v6.16.4
v6.17.0
v6.17.1
v6.18.2
v6.18.3
v6.19.0
v6.19.1
v6.19.2
v7.*
v7.0.0
v7.0.1
v7.0.3
v7.0.4
v7.1.0
v7.1.1
v7.1.2
v7.3.0
v7.3.1
v7.5.0
v7.5.10
v7.5.11
v7.5.12
v7.5.7
v7.6.2
v7.7.0
v7.7.1
v7.7.2
v7.7.3
v7.7.4
v7.7.5
v7.7.6
v7.8.0
v7.8.1
v7.8.2
v7.8.3
v7.9.0
v7.9.1
v7.9.2
v7.9.3
v7.9.4
v7.9.5
v7.9.6
v7.9.7
v7.9.8
v8.*
v8.0.0
v8.1.0
v8.1.1
v8.1.2
v8.2.0
v8.3.0
v8.4.0
v8.4.1
v8.4.2
v8.4.3
v8.4.4
v8.4.5
v8.4.6
v8.5.0
v8.6.0
v8.6.1
v8.6.2
v8.6.3