Skip to content
OpenAdvisories
High · 7.5 CVE-2013-7400 EUVD-2013-7164GHSA-4mh5-jj5w-3f9q

The Direct Mail (direct_mail) TYPO3 extension improperly discloses sensitive information

Published Dec 29, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information by leveraging improper checking of authentication codes.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist directmailteam/direct-mail < 3.1.2 3.1.2 GHSA-4mh5-jj5w-3f9q

References