p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de directmailteam/direct-mail

Vulnerabilidades publicadas para directmailteam/direct-mail en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 8

  1. CVE-2023-50461

    Alta · CVSS 8.8EPSS 0,51%Corrección disponible

    CVE-2023-50461

    An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3. The Configuration backend module of the extension allows an authenticated user to write to an arbitrary TSConfig page for folders configured as Direct Mail. Exploiting this may lead to Configuration Injection (TYPO3 10.4 and above) and to Arbitrary Code Execution (TYPO3 9.5 and below). A valid backend user account, with access to the Direct Mail Configuration backend module, is needed to exploit this.

    directmailteam/direct-mail directmailteam/direct-mail directmailteam/direct-mailPHP
    • Actualiza a 6.0.3
    • Actualiza a 7.0.3
    • Actualiza a 9.5.2
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

  6. CVE-2019-16698

    Media · CVSS 4.3EPSS 0,69%Corrección disponible

    CVE-2019-16698

    The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users table) to view and export data of frontend users who are subscribed to a newsletter.

    directmailteam/direct-mailPHP
    • Actualiza a 5.2.3
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  8. CVE-2009-4159

    Baja · CVSS 2.1EPSS 0,84%Corrección disponible

    CVE-2009-4159

    Cross-site scripting (XSS) vulnerability in the newsletter configuration feature in the backend module in the Direct Mail (direct_mail) extension 2.6.4 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

    directmailteam/direct-mailPHP
    • Actualiza a 2.6.5
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →