CVE-2024-47047

CVE-2024-47047 concerns the powermail TYPO3 extension (up to 12.4.0). The root cause is the failure to validate the mail parameter in the createAction, leading to an Insecure Direct Object Reference (IDOR). Consequence: an unauthenticated attacker can view user-submitted data from all forms persi...

CVE-2024-45232

Summary (CVE-2024-45232) : The powermail TYPO3 extension (up to 12.3.5) is vulnerable to an IDOR due to failure to validate the mail parameter in the confirmationAction. An unauthenticated attacker can display user-submitted form data stored in the database when the setting plugin.tx_powermail.se...