Missing Authorization in TYPO3 extension

MEDIO 4.3CVE-2020-12700 · GHSA-qwmj-72mp-q3m2 · Published 13/05/2020 · updated 17/06/2026

In breve

CVE-2020-12700 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda directmailteam/direct-mail, direct mail (dkd).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.78%, superiore al 56.0% delle vulnerabilità.
Correzione: aggiornare a 5.2.4 o successiva.

Package	Affected versions	Patched versions
directmailteam/direct-mail Packagist	`< 5.2.4`	`5.2.4`
direct mail dkd	`≤ 5.2.3`	No fix yet

The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.

NVD description

The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 5.2.4

5.2.4

≤ 5.2.3

No fix yet

Altre vulnerabilità di directmailteam/direct-mail

Vedi tutto →