CVE-2024-45233

Packagist/in2code/powermail CVE-2024-45233: high 7.3

Powermail TYPO3 extension Broken Access Control in the OutputController

Action: Upgrade in2code/powermail to 7.5.0 or later.

composer require in2code/powermail:7.5.0

composer require in2code/powermail:8.5.0

composer require in2code/powermail:10.9.0

composer require in2code/powermail:12.4.0

Affected

Fixed versions

Sources

• osv: GHSA-9jqr-5x45-pgw8
• https://nvd.nist.gov/vuln/detail/CVE-2024-45233
• https://github.com/in2code-de/powermail/commit/04a010c4009202e8e1b4c72accd4d7b2771b80b3
• https://github.com/in2code-de/powermail/commit/2c8a1bf7669eb0661e8a93164f57e4b653ac3408
• https://github.com/in2code-de/powermail/commit/6e94ec5e0c7b553c467b826df1b922db6c2ad08e
• https://github.com/in2code-de/powermail/commit/f56f8eefe151ad67cbd32c21f1106953b8e4f19f
• https://github.com/in2code-de/powermail
• https://typo3.org/security/advisory/typo3-ext-sa-2024-006

CVE-2024-45233 · published 2024-08-29T00:31:35Z · modified 2024-08-30T15:14:51.652285Z · JSON