Powermail vulnerabilities
2 known vulnerabilities in Powermail from In2code. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest first
- 7.5 High severity
Powermail: Authorization Bypass Through User-Controlled Key
An issue was discovered in the powermail extension through 12.4.0 for TYPO3. It fails to validate the mail parameter of the createAction, resulting in Insecure Direct Object Reference (IDOR) in some configurations. An unauthenticated attacker can use this to d
- 9.8 Critical severity
typo3: Improper Access Control
An issue was discovered in powermail extension through 12.3.5 for TYPO3. Several actions in the OutputController can directly be called, due to missing or insufficiently implemented access checks, resulting in Broken Access Control. Depending on the configurat