Lucene search

K

Direct Mail Security Vulnerabilities - 2020

cve
cve

CVE-2020-12697

The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.

5.3CVSS

5.5AI Score

0.001EPSS

2020-05-13 01:15 PM
37
cve
cve

CVE-2020-12698

The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.

4.3CVSS

4.9AI Score

0.001EPSS

2020-05-13 01:15 PM
50
cve
cve

CVE-2020-12699

The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.

6.1CVSS

6.3AI Score

0.001EPSS

2020-05-13 01:15 PM
46
cve
cve

CVE-2020-12700

The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.

4.3CVSS

4.6AI Score

0.001EPSS

2020-05-13 01:15 PM
44