Skip to content
OpenAdvisories
Critical · 9.1 CVE-2022-47410 EUVD-2022-50173GHSA-vxmc-qg5x-pvfx

"Newsletter subscriber management" (fp_newsletter) TYPO3 extension leaks subscriber data

Published Dec 14, 2022 · Updated Apr 21, 2025 · Assigned by mitre

Description

An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via createAction operations.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist fixpunkt/fp-newsletter < 1.1.1 1.1.1 GHSA-vxmc-qg5x-pvfx
Packagist fixpunkt/fp-newsletter >= 1.2.0, < 2.1.2 2.1.2 GHSA-vxmc-qg5x-pvfx
Packagist fixpunkt/fp-newsletter >= 3.0.0, < 3.2.6 3.2.6 GHSA-vxmc-qg5x-pvfx

References