Lucene search

K
nvd[email protected]NVD:CVE-2022-47410
HistoryDec 14, 2022 - 9:15 p.m.

CVE-2022-47410

2022-12-1421:15:14
web.nvd.nist.gov
typo3
newsletter
extension
data subscribers

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

50.7%

An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via createAction operations.

Affected configurations

NVD
Node
fp_newsletter_projectfp_newsletterRange<1.1.1typo3
OR
fp_newsletter_projectfp_newsletterRange2.0.02.1.2typo3
OR
fp_newsletter_projectfp_newsletterRange2.2.12.4.0typo3
OR
fp_newsletter_projectfp_newsletterRange3.0.03.2.6typo3
OR
fp_newsletter_projectfp_newsletterMatch1.2.0typo3

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

50.7%

Related for NVD:CVE-2022-47410