25 matches found
EUVD-2021-0956
Malware in sbrugna...
direct_mail for Typo3 sensitive data exposure
The directmail aka Direct Mail extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user with restricted permissions to the feusers table to view and export data of frontend users who are subscribed to a newsletter...
GHSA-J2W4-45QM-R674 direct_mail for Typo3 sensitive data exposure
The directmail aka Direct Mail extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user with restricted permissions to the feusers table to view and export data of frontend users who are subscribed to a newsletter...
Missing Authorization in TYPO3 extension
The directmail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query...
GHSA-QWMJ-72MP-Q3M2 Missing Authorization in TYPO3 extension
The directmail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query...
GHSA-9PM8-XCJ6-2M33 Missing Authorization in TYPO3 extension
The directmail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables...
Missing Authorization in TYPO3 extension
The directmail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables...
Open redirect in direct_mail
The directmail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl...
GHSA-952M-M83C-3XM6 Open redirect in direct_mail
The directmail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl...
GHSA-5GM6-R79Q-HFGW Denial of service in direct_mail
The directmail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries...
Denial of service in direct_mail
The directmail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries...
CVE-2020-12699
The directmail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl...
CVE-2020-12700
The directmail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query...
CVE-2020-12697
The directmail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries...
CVE-2020-12698
The directmail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables...
Open redirect
The directmail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl...
Improper access control
The directmail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables...
Design/Logic Flaw
The directmail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries...
CVE-2020-12700
The CVE-2020-12700 issue affects TYPO3's Direct Mail extension (direct_mail), version up to 5.2.3. The root cause is a missing access check for an authenticated backend user when using the Special Query feature, which enables Information Disclosure of newsletter subscriber data. Documented impact...
CVE-2020-12699
The directmail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl...