CVE-2023-50461

CVE-2023-50461 affects the direct_mail (Direct Mail) extension through version 9.5.1 for TYPO3 . The Configuration backend module allows an authenticated backend user with access to that module to write arbitrary page TSConfig for folders configured as Direct Mail. This leads to Configuration Inj...