CVE-2013-7400

The CVE-2013-7400 entry applies to the TYPO3 Direct Mail extension (direct_mail) prior to version 3.1.2, where authentication codes were not checked correctly, allowing remote attackers to obtain sensitive information. Public sources in connected documents confirm an information-disclosure vulner...

Information Disclosure in extension Direct Mail (direct_mail)

It has been discovered that the extension "Direct Mail" direct mail is susceptible to Information Disclosure Release Date: September 25, 2013 Bulletin update: September 18, 2014 added CVE Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affect...