~ / search / GHSA-hqm2-gwqf-r5g5

GHSA-hqm2-gwqf-r5g5

SQL injection in TYPO3 extension

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-38302

Packages

EcosystemPackageAffectedFixed in
Packagist ecodev/newsletter <= 4.0.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

It has been discovered that the extension is susceptible to SQL Injection when processing bounced emails.

References

External links from the advisory. They lead to third-party sites.