En resumen
- CVE-2022-47411 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a fixpunkt/fp-newsletter, fp newsletter (fp newsletter project).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.72%, mayor que el 54.0% de las vulnerabilidades.
- Solución: actualizar a 2.1.2, 3.2.6, 1.1.1 o posterior.
| Package | Affected versions | Patched versions |
|---|
| fixpunkt/fp-newsletter Packagist | ≥ 1.2.0, < 2.1.2≥ 3.0.0, < 3.2.6< 1.1.1
| 2.1.23.2.61.1.1
|
| fp newsletter | = 1.2.0≥ 2.0.0, < 2.1.2≥ 2.2.1, ≤ 2.4.0≥ 3.0.0, < 3.2.6< 1.1.1
| 2.1.23.2.61.1.1
|
Description
An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via unsubscribeAction operations.
NVD description
An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via unsubscribeAction operations.
Más vulnerabilidades de fixpunkt/fp-newsletter
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free