The Direct Mail (direct_mail) TYPO3 extension improperly discloses sensitive information

Description

References

• nvd.nist.gov/vuln/detail/CVE-2013-7400 · ADVISORY
• extensions.typo3.org/extension/direct_mail · WEB
• kartolo/direct_mail · PACKAGE
• typo3.org/security/advisory/typo3-ext-sa-2013-014 · WEB
• openwall.com/lists/oss-security/2014/09/11/4 · WEB
• extensions.typo3.org/extension/direct_mail · Product
• typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-014 · Vendor Advisory

Mais vulnerabilidades de directmailteam/direct-mail

• CVE-2023-50461ALTO 8.8An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3. The Configuration backend module of the exte…
• CVE-2020-12700MÉDIO 4.3The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.
• CVE-2020-12699MÉDIO 6.1The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.
• CVE-2020-12698MÉDIO 4.3The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.
• CVE-2020-12697MÉDIO 5.3The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.