Approved changes feed: RSS · Atom

cpe:2.3:a:acymailing:newsletter_via_smtp,_sendinblue,_sendgrid,_mailgun_-_acymailing_smtp_newsletter:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAcymailing (e793a6e6-12d0-5a45-ac63-062287209ca7)
ProductNewsletter Via Smtp, Sendinblue, Sendgrid, Mailgun Acymailing Smtp Newsletter (c119cc38-8d4c-5d9b-b201-a7f0a52b255a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24288 vulnerable 2026-06-03 14:43:56.721342 AcyMailing < 7.5.0 - Unauthenticated Open Redirect
When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially malicious landing page and send it to the victim.
Published: 2021-05-17T16:48:52.000Z
Updated: 2024-08-03T19:28:23.248Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.