medium4.3
CVE-2020-12698
Missing Authorization in TYPO3 extension
Impact
The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | directmailteam/direct-mail | < 5.2.4 | 5.2.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dkd | Direct Mail | through 5.2.3 |