Paper/Archive/CVE-2022-47411

CVE-2022-47411

mitre — An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.…

EPSS 0.7%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (CNA)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 53.9.539 × 2010.8 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via unsubscribeAction operations.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

mitre (CNA)9.1CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:N/S:U/UI:N

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

reftypo3.org/security/advisory/typo3-ext-sa-2022-017