Packagist/in2code/powermail CVE-2025-7899: medium, EPSS 0.33%
Powermail extension for TYPO3 allows Insecure Direct Object Reference
Action: Upgrade in2code/powermail to 12.5.3 or later.
composer require in2code/powermail:12.5.3composer require in2code/powermail:13.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 12.0.0 | 12.5.3 | - |
| 13.0.0 | 13.0.1 | - |
Fixed versions
| 12.5.3 | 13.0.1 |
Sources
- osv: GHSA-x769-3cwv-f8hc
- https://nvd.nist.gov/vuln/detail/CVE-2025-7899
- https://github.com/in2code-de/powermail/commit/b39e129c5e2a797f0ccf271fea220c7933ca77bc
- https://github.com/in2code-de/powermail
- https://typo3.org/security/advisory/typo3-ext-sa-2025-009
CVE-2025-7899 · published · modified · JSON