Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

directmailteam/direct-mail

8 known vulnerabilities (1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
8 · 1 high
Registry
Packagist

Advisories 8

  • An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3.

    Affected: from 8.0.0, fixed in 9.5.2; from 7.0.0, fixed in 7.0.3; fixed in 6.0.3.

  • The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.

    Affected: fixed in 5.2.4.

  • The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.

    Affected: fixed in 5.2.4.

  • The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.

    Affected: fixed in 5.2.4.

  • The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.

    Affected: fixed in 5.2.4.

  • The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user…

    Affected: fixed in 5.2.3.

  • The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information by leveraging…

    Affected: fixed in 3.1.2.

  • Cross-site scripting (XSS) vulnerability in the newsletter configuration feature in the backend module in the Direct Mail (direct_mail)…

    Affected: fixed in 2.6.5.