En bref
- CVE-2022-47410 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant fixpunkt/fp-newsletter, fp newsletter (fp newsletter project).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.72%, plus élevée que 54.0% des vulnérabilités.
- Correctif : mettre à jour vers 2.1.2, 3.2.6, 1.1.1 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| fixpunkt/fp-newsletter Packagist | ≥ 1.2.0, < 2.1.2≥ 3.0.0, < 3.2.6< 1.1.1
| 2.1.23.2.61.1.1
|
| fp newsletter | = 1.2.0≥ 2.0.0, < 2.1.2≥ 2.2.1, ≤ 2.4.0≥ 3.0.0, < 3.2.6< 1.1.1
| 2.1.23.2.61.1.1
|
Description
An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via createAction operations.
NVD description
An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via createAction operations.
Autres vulnérabilités de fixpunkt/fp-newsletter
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free