CVE-2024-47047

CVE-2024-47047 concerns the powermail TYPO3 extension (up to 12.4.0). The root cause is the failure to validate the mail parameter in the createAction, leading to an Insecure Direct Object Reference (IDOR). Consequence: an unauthenticated attacker can view user-submitted data from all forms persi...

CVE-2024-45232

The powermail extension for TYPO3 (versions through 12.3.5) is vulnerable to an Insecure Direct Object Reference (IDOR) due to a failure to validate the mail parameter of the confirmationAction. An unauthenticated attacker can exploit this to view user-submitted data from all forms persisted by t...