Lucene search

K
nvd[email protected]NVD:CVE-2022-47411
HistoryDec 14, 2022 - 9:15 p.m.

CVE-2022-47411

2022-12-1421:15:14
web.nvd.nist.gov
typo3
fp_newsletter
subscriber management

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

50.7%

An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via unsubscribeAction operations.

Affected configurations

NVD
Node
fp_newsletter_projectfp_newsletterRange<1.1.1typo3
OR
fp_newsletter_projectfp_newsletterRange2.0.02.1.2typo3
OR
fp_newsletter_projectfp_newsletterRange2.2.12.4.0typo3
OR
fp_newsletter_projectfp_newsletterRange3.0.03.2.6typo3
OR
fp_newsletter_projectfp_newsletterMatch1.2.0typo3

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

50.7%

Related for NVD:CVE-2022-47411