MEDIUM4.3
GHSA-qwmj-72mp-q3m2
Missing Authorization in TYPO3 extension
Quick fix
GHSA-qwmj-72mp-q3m2 — directmailteam/direct-mail: upgrade to the fixed version with the command below.
composer require directmailteam/direct-mail:^5.2.4Details
The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/directmailteam/direct-mail
Introduced in:
0Fixed in: 5.2.4Fix
composer require directmailteam/direct-mail:^5.2.4