5 matches found
Information Disclosure
directmailteam/direct-mail is vulnerable to information disclosure. The extension fails to check if an authenticated backend user has access to pages with newsletter subscriber data when using the "Special query" feature...
4.3CVSS2.6AI score0.00778EPSS
SaveExploits0References3Affected Software1
CVE-2020-12700
The directmail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query...
4.3CVSS5.9AI score0.00778EPSS
SaveExploits0References2
CVE-2020-12700
The directmail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query...
4.3CVSS4.5AI score0.00778EPSS
SaveExploits0References2
20