Approved changes feed: RSS · Atom

cpe:2.3:a:fp_newsletter_project:fp_newsletter:*:*:*:*:*:typo3:*:*

part: a version: * update: *

VendorFp Newsletter Project (1db71c60-1f3b-5696-a0ff-65b284a7c0cc)
ProductFp Newsletter (ee66bd0b-145c-5530-995d-1403f4fc183e)
Edition*
Language*
Software edition*
Target softwaretypo3
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/bihor/fp_newsletter purl2cpe 2026-06-01 10:12:18.655063

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-47411 vulnerable 2026-06-08 05:50:40.392542 Details available
CRITICAL (9.1)
An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via unsubscribeAction operations.
Published: 2022-12-14T00:00:00.000Z
Updated: 2025-04-21T18:48:59.134Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47410 vulnerable 2026-06-08 05:50:40.392057 Details available
CRITICAL (9.1)
An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via createAction operations.
Published: 2022-12-14T00:00:00.000Z
Updated: 2025-04-21T18:50:17.594Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47409 vulnerable 2026-06-08 05:50:40.391478 Details available
CRITICAL (9.1)
An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Attackers can unsubscribe everyone via a series of modified subscription UIDs in deleteAction operations.
Published: 2022-12-14T00:00:00.000Z
Updated: 2025-04-21T18:52:05.710Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47408 vulnerable 2026-06-08 05:50:40.390099 Details available
CRITICAL (9.1)
An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. There is a CAPTCHA bypass that can lead to subscribing many people.
Published: 2022-12-14T00:00:00.000Z
Updated: 2025-04-21T18:57:29.737Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.