Missing Authorization in TYPO3 extension

2021-07-2621:34:58

Google

osv.dev

0.001 Low

EPSS

Percentile

22.7%

JSON

The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.

CPENameOperatorVersion
directmailteam/direct-maileq5.2.1
directmailteam/direct-maileq5.0.1
directmailteam/direct-maileq5.2.3
directmailteam/direct-maileq5.1.1
directmailteam/direct-maileq5.2.2
directmailteam/direct-maileq5.1.0
directmailteam/direct-maileq5.2.0
directmailteam/direct-maileq5.0

Name	Operator	Version
directmailteam/direct-mail	eq	5.2.1
directmailteam/direct-mail	eq	5.0.1
directmailteam/direct-mail	eq	5.2.3
directmailteam/direct-mail	eq	5.1.1
directmailteam/direct-mail	eq	5.2.2
directmailteam/direct-mail	eq	5.1.0
directmailteam/direct-mail	eq	5.2.0
directmailteam/direct-mail	eq	5.0