Skip to content
OpenAdvisories

Package · Packagist

directmailteam/direct-mail

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2023-50461

    Configuration Injection in extension "Direct Mail" (direct_mail)

    An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3. The Configuration backend module of the extension allows an authenticated user to write to an arbitrary TSConfig page for folders configured as Direct Mail. Exploi…

    TYPO3 direct_mail directmailteam/direct-mail Packagist
  • High 7.5
    CVE-2013-7400

    The Direct Mail (direct_mail) TYPO3 extension improperly discloses sensitive information

    The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information by leveraging improper checking of authentication codes.

    directmailteam/direct-mail Packagist