PT-2020-13213 · Typo3 · Typo3 Direct Mail Extension

Kurt Dirnbauer · Published 2020-05-13 · Updated 2021-05-24 · CVE-2020-12699

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions TYPO3 direct mail extension versions through 5.2.3

Description The issue concerns an Open Redirect via the jumpUrl.

Recommendations For versions through 5.2.3, update to a version that contains a fix for this issue.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2020-12699

GHSA-952M-M83C-3XM6

Affected Products

Typo3 Direct Mail Extension

References · 6

• https://typo3.org/help/security-advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12699 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12699 · Vendor Advisory
• https://typo3.org/security/advisory/typo3-ext-sa-2020-005 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-952m-m83c-3xm6 · Vendor Advisory
• https://t.me/cvenotify/3733 · Telegram Post