p PatchFirst

CVE-2020-12700

CVE-2020-12700

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.

CVSS 4.3 · Medium · EPSS 0.8% · Fix available

Published
Updated

Stack: php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • directmailteam/direct-mail Packagist

    Versions
    • 5.0
    • 5.0.1
    • 5.1.0
    • 5.2.0
    • 5.2.1
    • 5.2.2
    • 5.2.3
    • v5.1.1
    Affected ranges
    • ECOSYSTEM: < 5.2.4

    Update to 5.2.4

Original sources

Check your server →