Skip to content
OpenAdvisories
Critical · 9.1 CVE-2022-47411 EUVD-2022-50174GHSA-r44w-pfx8-28jv

"Newsletter subscriber management" (fp_newsletter) TYPO3 extension leaks subscriber data

Published Dec 14, 2022 · Updated Apr 21, 2025 · Assigned by mitre

Description

An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via unsubscribeAction operations.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist fixpunkt/fp-newsletter < 1.1.1 1.1.1 GHSA-r44w-pfx8-28jv
Packagist fixpunkt/fp-newsletter >= 1.2.0, < 2.1.2 2.1.2 GHSA-r44w-pfx8-28jv
Packagist fixpunkt/fp-newsletter >= 3.0.0, < 3.2.6 3.2.6 GHSA-r44w-pfx8-28jv

References