CVE-2024-45232

{"id": "CVE-2024-45232", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 3.9}]}, "published": "2024-08-29T00:15:09.177", "references": [{"url": "https://typo3.org/security/advisory/typo3-ext-sa-2024-006", "tags": ["Third Party Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-639"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-639"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in powermail extension through 12.3.5 for TYPO3. It fails to validate the mail parameter of the confirmationAction, resulting in Insecure Direct Object Reference (IDOR). An unauthenticated attacker can use this to display the user-submitted data of all forms persisted by the extension. This can only be exploited when the extension is configured to save submitted form data to the database (plugin.tx_powermail.settings.db.enable=1), which however is the default setting of the extension. The fixed versions are 7.5.0, 8.5.0, 10.9.0, and 12.4.0"}, {"lang": "es", "value": "Se descubri\u00f3 un problema en la extensi\u00f3n Powermail hasta la versi\u00f3n 12.3.5 para TYPO3. No se puede validar el par\u00e1metro de correo de la acci\u00f3n de confirmaci\u00f3n, lo que genera una referencia directa a objetos insegura (IDOR). Un atacante no autenticado puede usar esto para mostrar los datos enviados por el usuario de todos los formularios que la extensi\u00f3n mantiene. Esto solo se puede explotar cuando la extensi\u00f3n est\u00e1 configurada para guardar los datos de los formularios enviados en la base de datos (plugin.tx_powermail.settings.db.enable=1), que, sin embargo, es la configuraci\u00f3n predeterminada de la extensi\u00f3n. Las versiones corregidas son 7.5.0, 8.5.0, 10.9.0 y 12.4.0"}], "lastModified": "2024-08-30T16:34:39.270", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:in2code:powermail:*:*:*:*:*:typo3:*:*", "vulnerable": true, "matchCriteriaId": "B62C9C43-F43A-465C-B046-0CC44487DF0C", "versionEndExcluding": "7.5.0"}, {"criteria": "cpe:2.3:a:in2code:powermail:*:*:*:*:*:typo3:*:*", "vulnerable": true, "matchCriteriaId": "7A816901-4C68-42FF-9096-204E2046A757", "versionEndExcluding": "8.5.0", "versionStartIncluding": "8.0.0"}, {"criteria": "cpe:2.3:a:in2code:powermail:*:*:*:*:*:typo3:*:*", "vulnerable": true, "matchCriteriaId": "E21ABE99-FEC7-4155-BEB5-C76B842C492B", "versionEndExcluding": "10.9.0", "versionStartIncluding": "9.0.0"}, {"criteria": "cpe:2.3:a:in2code:powermail:*:*:*:*:*:typo3:*:*", "vulnerable": true, "matchCriteriaId": "03F37EE5-5FCA-49B7-8D09-C397236264AD", "versionEndExcluding": "12.4.0", "versionStartIncluding": "12.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}