Paper/Archive/CVE-2023-28731

CVE-2023-28731

AcyMailing Newsletter Plugin for Joomla in the Enterprise version — Unauthenticated RCE affecting the AcyMailing plugin for Joomla

EPSS 2%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD, CNA agree)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 78.3.783 × 2015.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

AnyMailing Joomla Plugin is vulnerable to unauthenticated remote code execution, when being granted access to the campaign's creation on front-office due to unrestricted file upload allowing PHP code to be injected. This issue affects AnyMailing Joomla Plugin Enterprise in versions below 8.3.0.

Affected

ProductAffectedFixed inSource

Newsletter Plugin for Joomla in the Enterprise version< 8.3.08.3.0CNA

Scores by source

NCSC.ch (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refacymailing.com/change-log refbugbounty.ch/advisories/CVE-2023-28731