{"action":"Upgrade in2code/powermail to 1.5.2 or later.","affected":[{"fixed":"1.5.2","introduced":"0"}],"component":"in2code/powermail","cve_ids":["CVE-2010-0329"],"ecosystem":"Packagist","epss":0.01063,"exploited":false,"fixed_versions":["1.5.2"],"ghsa_id":"GHSA-mgw4-gv3f-g57j","id":"tcs_01M5KF5JBK4X1K74PBS697M4GY","modified_at":"2025-04-10T12:42:12.839587Z","published_at":"2022-05-02T06:11:45Z","references":["https://osv.dev/vulnerability/GHSA-mgw4-gv3f-g57j","https://nvd.nist.gov/vuln/detail/CVE-2010-0329","https://web.archive.org/web/20100123124044/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021","http://typo3.org/extensions/repository/view/powermail/1.5.2","http://typo3.org/extensions/repository/view/powermail/1.5.2/info/changelog.txt"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-mgw4-gv3f-g57j","url":"https://osv.dev/vulnerability/GHSA-mgw4-gv3f-g57j"}],"summary":"TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors"}