CVE-2026-120327

The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to redirect users to external sites...

CVE-2026-120328

The click tracking middleware does not validate the authentication code of a recipient if the code is omitted. Unauthenticated attackers can retrieve personal data of newsletter recipients, which is inserted into links of sent mails...

CVE-2026-120328 Information Disclosure in extension "Mail" (mail)

The click tracking middleware does not validate the authentication code of a recipient if the code is omitted. Unauthenticated attackers can retrieve personal data of newsletter recipients, which is inserted into links of sent mails...

CVE-2026-120327

The TYPO3 Extension "Mail" (mediaessenz/mail) is vulnerable to an Open Redirection (CWE-601) due to its click tracking middleware. The middleware accepts an arbitrary target URL and redirects the user to it, allowing attackers to misuse website links to redirect users to malicious external sites....

CVE-2026-120327 Open Redirection in extension "Mail" (mail)

The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to redirect users to external sites...

EUVD-2026-115742

The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to redirect users to external sites...

EUVD-2026-115741

The click tracking middleware does not validate the authentication code of a recipient if the code is omitted. Unauthenticated attackers can retrieve personal data of newsletter recipients, which is inserted into links of sent mails...

CVE-2026-120328

The TYPO3 extension "Mail" (mail) is affected by an Information Disclosure vulnerability (CVE-2026-120328 ) in its click tracking middleware. The root cause is a failure to validate a recipient's authentication code when that code is omitted. This allow unauthenticated attackers to retrieve perso...