TI-2026-84197 CVE-2026-120327 · GHSA-4gvg-mc6q-56hf
Open redirection in TYPO3 extension Mail
Priority LOW 30
The click tracking middleware accepts an arbitrary target URL and redirects to it.
Vulnerabilities
6 records
Advisory: TYPO3 Extension "Mail" — typo3.org/security/advisory/typo3-ext-sa-2026-037 Clear all filters
TI-2026-84198 CVE-2026-120328 · GHSA-8cvh-5xpf-xwvx
Information disclosure in TYPO3 extension Mail exposes recipient data
Priority LOW 37
The click tracking middleware does not validate the authentication code of a recipient if the code is omitted.
TI-2026-84199 CVE-2026-120329 · GHSA-8wqm-6fj9-3468
Broken access control in TYPO3 extension Mail lets backend users write TSconfig
Priority LOW 24
Saving the configuration of the mail backend module writes submitted settings to the page TSconfig without restricting them to the configuration options of the module.
TI-2026-84200 CVE-2026-120330 · GHSA-2xxv-cj6j-pj6f
TYPO3 Mail: backend users reach mails outside web mounts
Priority LOW 31
Backend actions and ajax routes of the mail module do not check whether the backend user has access to the page of the requested mail or recipient group.
TI-2026-84201 CVE-2026-120331 · GHSA-fr59-cpw2-mg8r
Server-Side Request Forgery in TYPO3 extension Mail
Priority LOW 24
Content of external URL mails, their stylesheets and images to embed is fetched by the server without validating the target host.
TI-2026-84202 CVE-2026-120332 · GHSA-28j5-vvxh-8mj8
Cross-site scripting in TYPO3 Mail extension backend
Priority LOW 23
The HTML content of mails and tracked URLs are rendered unescaped in the backend module.