Dkd

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Dkd records in CISA KEV

No Dkd vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Direct Mail 6 records LOW

Records

6 records in Direct Mail · all components

TI-2013-06062 CVE-2013-7400 · GHSA-4mh5-jj5w-3f9q

The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to…

LOW 36

The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information by leveraging improper checking of authentication codes.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01649 Published 2017-12-29 Fixed in 3.1.2 CWE-200

TI-2020-10098 CVE-2020-12699 · GHSA-952m-m83c-3xm6

The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.

LOW 29

The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00801 Published 2020-05-13 Fixed in 5.2.4 CWE-601

TI-2020-10096 CVE-2020-12697 · GHSA-5gm6-r79q-hfgw

The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.

LOW 27

The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01312 Published 2020-05-13 Fixed in 5.2.4 CWE-770

TI-2020-10099 CVE-2020-12700 · GHSA-qwmj-72mp-q3m2

The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a…

LOW 21

The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00778 Published 2020-05-13 Fixed in 5.2.4 CWE-862

TI-2020-10097 CVE-2020-12698 · GHSA-9pm8-xcj6-2m33

The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.

LOW 21

The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00778 Published 2020-05-13 Fixed in 5.2.4 CWE-862

TI-2019-12490 CVE-2019-16698 · GHSA-j2w4-45qm-r674

The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access…

LOW 21

The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users table) to view and export data of fronten…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00685 Published 2019-10-16 Fixed in 5.2.3 CWE-862

Open these records in search →

Critical	0
High	1
Medium	5
Low	0
No CVSS	0