Lucene search
Veracode Vulnerability DatabaseVERACODE:31394HistoryJul 28, 2021 - 4:55 a.m.
Insecure Access Control
2021-07-2804:55:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
22.7%
directmailteam/direct-mail uses insecure access controls. The extension fails to check if an authenticated backend user has access to newsletter subscriber tables (e.g. tt_address, fe_users) when using the CSV export function of the extension.
| CPE | Name | Operator | Version |
|---|---|---|---|
| directmailteam/direct-mail | le | 5.2.3 | |
| directmailteam/direct-mail | le | 5.2.3 |
Related
cve
cve
CVE-2020-12698
2020-05-13 13:15:14
cvelist
cvelist
CVE-2020-12698
2020-05-13 12:41:58
nvd
nvd
CVE-2020-12698
2020-05-13 13:15:14
osv
osv
Missing Authorization in TYPO3 extension
2021-07-26 21:34:52
prion
prion
Improper access control
2020-05-13 13:15:00
github
github
Missing Authorization in TYPO3 extension
2021-07-26 21:34:52
typo3
typo3
Multiple vulnerabilities in extension "Direct Mail" (direct_mail)
2020-05-12 00:00:00