Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:38514
HistoryDec 16, 2022 - 5:16 a.m.

Privilege Escalation

2022-12-1605:16:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
privilege escalation
validation bypass
subscription bypass
software vulnerability

EPSS

0.001

Percentile

51.3%

JSON

fixpunkt/fp-newsletter is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation in the captcha library, which allows an attacker to bypass security mechanisms and subscribe to many people.

Related

osv 2
github 1
friendsofphp 1
cvelist 1
nvd 1
prion 1
cve 1
osv
osv
CVE-2022-47408
2022-12-14 21:15:14
Multiple vulnerabilities in extension "Newsletter subscriber management" (fp_newsletter)
2022-12-14 21:30:16
github
github
Multiple vulnerabilities in extension "Newsletter subscriber management" (fp_newsletter)
2022-12-14 21:30:16
friendsofphp
friendsofphp
TYPO3-EXT-SA-2022-017: Multiple vulnerabilities in extension "Newsletter subscriber management" (fp_newsletter)
2022-12-13 10:32:00
cvelist
cvelist
CVE-2022-47408
2022-12-14 00:00:00
nvd
nvd
CVE-2022-47408
2022-12-14 21:15:14
prion
prion
Design/Logic Flaw
2022-12-14 21:15:00
cve
cve
CVE-2022-47408
2022-12-14 21:15:14

EPSS

0.001

Percentile

51.3%

JSON
Related for VERACODE:38514
osv2github1friendsofphp1cvelist1nvd1prion1cve1