https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 13:34:34 +0000 https://vulnerability.circl.lu/vuln/cnvd-2019-41238 cnvd-2019-41238 https://vulnerability.circl.lu/vuln/cnvd-2019-41238 https://vulnerability.circl.lu/vuln/fkie_cve-2019-16698 <p>The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users table) to view and export data of frontend users who are subscribed to a newsletter.</p> <p>The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users table) to view and export data of frontend users who are subscribed to a newsletter.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2019-16698 https://vulnerability.circl.lu/vuln/ghsa-j2w4-45qm-r674 <p><strong>Affected:</strong> Packagist: directmailteam/direct-mail</p> <p>The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users table) to view and export data of frontend users who are subscribed to a newsletter.</p> <p><strong>Affected:</strong> Packagist: directmailteam/direct-mail</p> <p>The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users table) to view and export data of frontend users who are subscribed to a newsletter.</p> https://vulnerability.circl.lu/vuln/ghsa-j2w4-45qm-r674 https://vulnerability.circl.lu/vuln/gsd-2019-16698 gsd-2019-16698 https://vulnerability.circl.lu/vuln/gsd-2019-16698