Directmailteam/direct-mail

This hub aggregates every CVE we track for Directmailteam/direct-mail, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 8 most recently published vulnerabilities affecting Directmailteam/direct-mail.

• CVE-2023-50461An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3. The Configuration backend module of the extension allows an authenticated user to write to an arbitra...8.8Sep 14, 2026
• CVE-2020-12700The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.4.3May 13, 2020
• CVE-2020-12699The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.6.1May 13, 2020
• CVE-2020-12698The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.4.3May 13, 2020
• CVE-2020-12697The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.5.3May 13, 2020
• CVE-2019-16698The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users table) to view and...4.3Oct 16, 2019
• CVE-2013-7400The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information by leveraging improper checking of authentication codes.7.5Dec 29, 2017
• CVE-2009-4159Cross-site scripting (XSS) vulnerability in the newsletter configuration feature in the backend module in the Direct Mail (direct_mail) extension 2.6.4 and earlier for TYPO3 allows remote authentic...3.5Dec 2, 2009