Missing Authorization in TYPO3 extension

MEDIO 4.3CVE-2020-12700 · GHSA-qwmj-72mp-q3m2 · Published 13/05/2020 · updated 17/06/2026

En resumen

CVE-2020-12700 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a directmailteam/direct-mail, direct mail (dkd).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.78%, mayor que el 56.0% de las vulnerabilidades.
Solución: actualizar a 5.2.4 o posterior.

Package	Affected versions	Patched versions
directmailteam/direct-mail Packagist	`< 5.2.4`	`5.2.4`
direct mail dkd	`≤ 5.2.3`	No fix yet

The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.

NVD description

The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 5.2.4

5.2.4

≤ 5.2.3

No fix yet

Más vulnerabilidades de directmailteam/direct-mail

Ver todo →