Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Md-systems Component: Simplenews Clear all filters
TI-2012-02356 CVE-2012-2724 · GHSA-59qq-h9qc-fpvf

Information disclosure in Simplenews

Priority LOW 29

The Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7.x-1.0-rc1 for Drupal reveals the email addresses of new mailing list subscribers when confirmation is required, which allo…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02453 Published 2020-01-09 Fixed in 6.x-1.4, 6.x-2.0-alpha4 CWE-200