{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://extensions.joomla.org/extension/acymailing-starter/","packageName":"com_acymailing","product":"AcyMailing component for Joomla","source":"CNA: Joomla","vendor":"Datasolution","versions":[{"status":"affected","version":"6.7.0-8.5.0"}]}],"cveId":"CVE-2023-39970","cwes":["CWE-434"],"description":"Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla. It allows remote code execution.","epss":{"date":"2026-11-12","percentile":0.64838,"score":0.01053},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1794506829623,"publishedAt":1692302792953,"references":[{"source":"CNA: Joomla","tags":["product"],"url":"https://extensions.joomla.org/extension/acymailing-starter/"},{"source":"ADP: CVE","tags":["product","x_transferred"],"url":"https://extensions.joomla.org/extension/acymailing-starter/"}],"remediation":[],"revision":"fa5021b9a6d77b44813f94c63935ac0d7c7287a4b7830c9b3f231893613969a3","sources":[{"modifiedAt":1794506829623,"name":"CNA: Joomla","retrievedAt":1794510499128,"url":"https://www.cve.org/CVERecord?id=CVE-2023-39970"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794510529715,"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-39970"}],"ssvc":{"assessedAt":1728330579743,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Extension - acymailing.com - RCE in AcyMailing component for Joomla 6.7.0-8.5.0","updatedAt":1794510529715}