CoreCVE
Back

CRITICAL

An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3

Published Dec 14, 2022

Description

An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Attackers can unsubscribe everyone via a series of modified subscription UIDs in deleteAction operations.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-285

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Dec 14, 2022
Updated Apr 21, 2025
Reserved Dec 14, 2022
Link CVE-2022-47409
CISA Vulnrichment
Updated Apr 21, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-47409
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-47409