Insecure Direct Object Reference (IDOR)

🗓️ 30 Aug 2024 07:37:03Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 16 Views

in2code/powermail vulnerability with insufficient validation of mail paramete

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-45232	29 Aug 202402:50	–	circl
CNNVD	TYPO3 安全漏洞	28 Aug 202400:00	–	cnnvd
CVE	CVE-2024-45232	28 Aug 202400:00	–	cve
Cvelist	CVE-2024-45232	28 Aug 202400:00	–	cvelist
Friends Of PHP	TYPO3-EXT-SA-2024-006: Multiple vulnerabilities in "powermail" (powermail)	27 Aug 202406:55	–	friendsofphp
Github Security Blog	"powermail" (powermail) Insecure Direct Object Reference (IDOR)	29 Aug 202417:59	–	github
NVD	CVE-2024-45232	29 Aug 202400:15	–	nvd
OSV	CVE-2024-45232	29 Aug 202400:15	–	osv
OSV	GHSA-P652-XCGX-F85M "powermail" (powermail) Insecure Direct Object Reference (IDOR)	29 Aug 202417:59	–	osv
Positive Technologies	PT-2024-31490 · Typo3 · Powermail	28 Aug 202400:00	–	ptsecurity

Vulners

Node

powermail in2code/powermailRange11.0.0–12.3.5php

OR

powermail in2code/powermailRange9.0.0–10.8.2php

OR

powermail in2code/powermailRange8.0.0–8.4.2php

OR

powermail in2code/powermailRange1.10.0–7.4.4php

Source	Link
github	www.github.com/in2code-de/powermail/commit/ac402d4972c77dd119c8db6ffe594c15e8ae0bc5
github	www.github.com/in2code-de/powermail/commit/f58d70311799ae5f6acbec52ea9206d21eba91bb
github	www.github.com/in2code-de/powermail/commit/e2ddfaa06d29019d60be02b5a3da04b237ed760b
github	www.github.com/in2code-de/powermail/commit/061756732357206f2f13bf39a0676dd266ec9586
github	www.github.com/advisories/GHSA-p652-xcgx-f85m
typo3	www.typo3.org/security/advisory/typo3-ext-sa-2024-006
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/in2code/powermail/CVE-2024-45232.yaml

30 Aug 2024 18:47Current

7.1High risk

Vulners AI Score7.1

CVSS 3.15.3 - 7.3

EPSS0.00297

SSVC

insecure direct object reference powermail extension unauthenticated attacker user-submitted data database persistence