Approved changes feed: RSS · Atom

cpe:2.3:a:dkd:direct_mail:*:*:*:*:*:typo3:*:*

part: a version: * update: *

VendorDkd (b036379d-7d12-5f65-a679-fe76a1b58922)
ProductDirect Mail (2f1c9087-67cf-522b-9bb0-eab3ef45c616)
Edition*
Language*
Software edition*
Target softwaretypo3
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-12700 vulnerable 2026-06-08 05:17:58.911737 Details available
The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.
Published: 2020-05-13T12:43:23.000Z
Updated: 2024-08-04T12:04:22.545Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12699 vulnerable 2026-06-08 05:17:58.911426 Details available
The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.
Published: 2020-05-13T12:42:29.000Z
Updated: 2024-08-04T12:04:22.529Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12698 vulnerable 2026-06-08 05:17:58.911094 Details available
The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.
Published: 2020-05-13T12:41:58.000Z
Updated: 2024-08-04T12:04:22.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12697 vulnerable 2026-06-08 05:17:58.910672 Details available
The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.
Published: 2020-05-13T12:40:55.000Z
Updated: 2024-08-04T12:04:22.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16698 vulnerable 2026-06-08 05:13:09.247997 Details available
The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users table) to view and export data of frontend users who are subscribed to a newsletter.
Published: 2019-10-16T18:45:44.000Z
Updated: 2024-08-05T01:17:41.141Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7400 vulnerable 2026-06-08 05:05:10.240442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.