Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/directmailteam/direct-mail@5.2.4
purl pkg:composer/directmailteam/direct-mail@5.2.4
Next non-vulnerable version 7.0.3
Latest non-vulnerable version 9.5.2
Risk score 4.0
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-p6xx-fhfw-7mj7
Aliases:
CVE-2023-50461
Configuration Injection in extension "Direct Mail" (direct_mail) The “Configuration” backend module of the extension allows an authenticated user to write … There are no reported fixed by versions.
Vulnerabilities fixed by this package (4)

Advisory Summary Aliases
GHSA-5gm6-r79q-hfgw
Denial of service in direct_mail The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries. CVE-2020-12697
GHSA-952m-m83c-3xm6
Open redirect in direct_mail The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl. CVE-2020-12699
GHSA-qwmj-72mp-q3m2
Missing Authorization in TYPO3 extension The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data … CVE-2020-12700
GHSA-9pm8-xcj6-2m33
Missing Authorization in TYPO3 extension The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables. CVE-2020-12698