Skip to content
OpenAdvisories

Product · TYPO3

direct_mail

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-50461

    Configuration Injection in extension "Direct Mail" (direct_mail)

    An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3. The Configuration backend module of the extension allows an authenticated user to write to an arbitrary TSConfig page for folders configured as Direct Mail. Exploi…

    TYPO3 direct_mail directmailteam/direct-mail Packagist