Lucene search
OpenJS FoundationFRIENDSOFPHP:IN2CODE:POWERMAIL:CVE-2024-47047HistorySep 17, 2024 - 8:41 a.m.
TYPO3-EXT-SA-2024-007: Insecure Direct Object Reference in extension "powermail" (powermail)
2024-09-1708:41:00
OpenJS Foundation
github.com
1
typo3
ext-sa-2024-007
security
powermail
software
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
37.7%
Affected configurations
Node
in2codepowermailRange<8.5.1typo3
Related
github
github
powermail TYPO3 extension has Insecure Direct Object Reference
2024-09-17 15:31:23
cvelist
cvelist
CVE-2024-47047
2024-09-17 00:00:00
nvd
nvd
CVE-2024-47047
2024-09-17 14:15:17
osv
osv
powermail TYPO3 extension has Insecure Direct Object Reference
2024-09-17 15:31:23
vulnrichment
vulnrichment
CVE-2024-47047
2024-09-17 00:00:00
cve
cve
CVE-2024-47047
2024-09-17 14:15:17
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
37.7%
Related for FRIENDSOFPHP:IN2CODE:POWERMAIL:CVE-2024-47047