Search for packages
| purl | pkg:composer/directmailteam/direct-mail@5.0.0 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-5gm6-r79q-hfgw
Aliases: CVE-2020-12697 |
Denial of service in direct_mail The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries. |
Vulnerable |
|
GHSA-952m-m83c-3xm6
Aliases: CVE-2020-12699 |
Open redirect in direct_mail The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl. |
Vulnerable |
|
GHSA-qwmj-72mp-q3m2
Aliases: CVE-2020-12700 |
Missing Authorization in TYPO3 extension The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data … |
Vulnerable |
|
GHSA-9pm8-xcj6-2m33
Aliases: CVE-2020-12698 |
Missing Authorization in TYPO3 extension The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables. |
Vulnerable |
|
GHSA-j2w4-45qm-r674
Aliases: CVE-2019-16698 |
direct_mail for Typo3 sensitive data exposure The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access … |
Vulnerable |
|
GHSA-p6xx-fhfw-7mj7
Aliases: CVE-2023-50461 |
Configuration Injection in extension "Direct Mail" (direct_mail) The “Configuration” backend module of the extension allows an authenticated user to write … | There are no reported fixed by versions. |
|
CVE-2019-16698
Aliases: GHSA-j2w4-45qm-r674 |
Missing Authorization The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend … | There are no reported fixed by versions. |