MEDIUM4.3
GHSA-9pm8-xcj6-2m33
Missing Authorization in TYPO3 extension
Quick fix
GHSA-9pm8-xcj6-2m33 — directmailteam/direct-mail: upgrade to the fixed version with the command below.
composer require directmailteam/direct-mail:^5.2.4Details
The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/directmailteam/direct-mail
Introduced in:
0Fixed in: 5.2.4Fix
composer require directmailteam/direct-mail:^5.2.4