Lucene search
+L

4 matches found

NVD
NVD
added 2020/05/13 1:15 p.m.25 views

CVE-2020-12697

The directmail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries...

5.3CVSS5.3AI score0.01279EPSS
SaveExploits0References2
CVE
CVE
added 2020/05/13 12:40 p.m.66 views

CVE-2020-12697

The CVE-2020-12697 entry affects the TYPO3 Direct Mail extension (direct_mail) up to version 5.2.3. Root cause: a logging mechanism for link clicks has no cap on log entry generation, enabling an attacker to cause excessive log writes and trigger a denial of service. Impact is described as DoS vi...

5.3CVSS5.5AI score0.01279EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/05/13 12:40 p.m.30 views

CVE-2020-12697

The directmail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries...

5.3AI score0.01279EPSS
SaveExploits0References2
Typo3
Typo3
added 2020/05/12 12:0 a.m.114 views

Multiple vulnerabilities in extension "Direct Mail" (direct_mail)

Denial of Service CVE-2020-12697 The extension provides a functionality to log clicks on links in sent newsletters. This functionality does not limit the amount of log entries generated per link, so it is possible to use a valid link to fill the log table with a huge amount of records...

5.8CVSS3.3AI score0.01279EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder