CVE-2023-50461
1 advisory.
Packagist/directmailteam/direct-mail CVE-2023-50461: high 8.8
Configuration Injection in extension "Direct Mail" (direct_mail)
Action: Upgrade directmailteam/direct-mail to 6.0.3 or later.
composer require directmailteam/direct-mail:9.5.2composer require directmailteam/direct-mail:7.0.3composer require directmailteam/direct-mail:6.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0 | 9.5.2 | - |
| 7.0.0 | 7.0.3 | - |
| 0 | 6.0.3 | - |
Fixed versions
| 9.5.2 | 7.0.3 | 6.0.3 |
Sources
- osv: GHSA-p6xx-fhfw-7mj7
- https://github.com/FriendsOfPHP/security-advisories/blob/master/directmailteam/direct-mail/CVE-2023-50461.yaml
- https://github.com/kartolo/direct_mail
- https://typo3.org/security/advisory/typo3-ext-sa-2023-011
CVE-2023-50461 · published · modified · JSON