En resumen
- CVE-2025-7899 es una vulnerabilidad MEDIO (CVSS 6.0) que afecta a in2code/powermail.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.33%, mayor que el 26.2% de las vulnerabilidades.
- Solución: actualizar a 12.5.3, 13.0.1 o posterior.
| Package | Affected versions | Patched versions |
|---|
| in2code/powermail Packagist | ≥ 12.0.0, < 12.5.3≥ 13.0.0, < 13.0.1
| 12.5.313.0.1
|
Description
The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from the webserver. This issue affects powermail version 12.0.0 up to 12.5.2 and version 13.0.0.
NVD description
The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from the webserver. This issue affects powermail version 12.0.0 up to 12.5.2 and version 13.0.0
Más vulnerabilidades de in2code/powermail
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free