CVE-2023-47849

Summary

CVE-2023-47849 is a missing authorization vulnerability affecting the BlossomThemes Email Newsletter from version n/a through 2.2.4. An attacker can exploit incorrectly configured access control security levels, gaining unauthorized access to the system. This weakness could potentially allow malicious actors to manipulate or steal sensitive data. Users are strongly advised to update their Email Newsletter application to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.