CVE-2019-16698
16.10.2019, 19:15
The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users table) to view and export data of frontend users who are subscribed to a newsletter.Enginsight
| Vendor | Product | Version |
|---|---|---|
| dkd | direct_mail | 𝑥 ≤ 5.2.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration