25 matches found
EUVD-2021-0956
Malware in sbrugna...
direct_mail for Typo3 sensitive data exposure
The directmail aka Direct Mail extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user with restricted permissions to the feusers table to view and export data of frontend users who are subscribed to a newsletter...
GHSA-J2W4-45QM-R674 direct_mail for Typo3 sensitive data exposure
The directmail aka Direct Mail extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user with restricted permissions to the feusers table to view and export data of frontend users who are subscribed to a newsletter...
Missing Authorization in TYPO3 extension
The directmail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query...
GHSA-QWMJ-72MP-Q3M2 Missing Authorization in TYPO3 extension
The directmail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query...
Missing Authorization in TYPO3 extension
The directmail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables...
GHSA-9PM8-XCJ6-2M33 Missing Authorization in TYPO3 extension
The directmail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables...
Open redirect in direct_mail
The directmail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl...
GHSA-952M-M83C-3XM6 Open redirect in direct_mail
The directmail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl...
Denial of service in direct_mail
The directmail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries...
GHSA-5GM6-R79Q-HFGW Denial of service in direct_mail
The directmail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries...
CVE-2020-12700
The directmail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query...
CVE-2020-12698
The directmail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables...
CVE-2020-12699
The directmail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl...
CVE-2020-12697
The directmail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries...
Improper access control
The directmail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables...
Design/Logic Flaw
The directmail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries...
Open redirect
The directmail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl...
CVE-2020-12700
The CVE-2020-12700 issue affects TYPO3's Direct Mail extension (direct_mail), version up to 5.2.3. The root cause is a missing access check for an authenticated backend user when using the Special Query feature, which enables Information Disclosure of newsletter subscriber data. Documented impact...
CVE-2020-12699
The CVE-2020-12699 entry concerns the TYPO3 Direct Mail (direct_mail) extension up to version 5.2.3, where the jumpUrl parameter is not sanitized, enabling an Open Redirect. This conclusion is supported by multiple connected sources (Veracode, GHSA/OSV, CVE records) describing an Open Redirect vi...