Missing Authorization in TYPO3 extension

Description

References

• nvd.nist.gov/vuln/detail/CVE-2020-12700 · ADVISORY
• typo3.org/help/security-advisories · WEB
• typo3.org/security/advisory/typo3-ext-sa-2020-005 · WEB

Autres vulnérabilités de directmailteam/direct-mail

• CVE-2023-50461ÉLEVÉE 8.8An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3. The Configuration backend module of the exte…
• CVE-2020-12699MOYENNE 6.1The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.
• CVE-2020-12698MOYENNE 4.3The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.
• CVE-2020-12697MOYENNE 5.3The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.
• CVE-2019-16698MOYENNE 4.3The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with …