In short
- CVE-2022-47411 is a HIGH (CVSS 7.5) vulnerability affecting fixpunkt/fp-newsletter, fp newsletter (fp newsletter project).
- Chance of exploitation in the next 30 days (EPSS): 0.72%, higher than 54.0% of all vulnerabilities.
- Fix: update to 2.1.2, 3.2.6, 1.1.1 or later.
| Package | Affected versions | Patched versions |
|---|
| fixpunkt/fp-newsletter Packagist | ≥ 1.2.0, < 2.1.2≥ 3.0.0, < 3.2.6< 1.1.1
| 2.1.23.2.61.1.1
|
| fp newsletter | = 1.2.0≥ 2.0.0, < 2.1.2≥ 2.2.1, ≤ 2.4.0≥ 3.0.0, < 3.2.6< 1.1.1
| 2.1.23.2.61.1.1
|
Description
An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via unsubscribeAction operations.
NVD description
An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via unsubscribeAction operations.
More vulnerabilities in fixpunkt/fp-newsletter
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free