Powermail EExtension up to 12.3.5 on TYPO3 confirmationAction resource injection

Summaryinfo

A vulnerability classified as problematic has been found in Powermail EExtension up to 12.3.5 on TYPO3. The affected element is the function confirmationAction. Performing a manipulation of the argument mail results in resource injection. This vulnerability is identified as CVE-2024-45232. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Powermail EExtension up to 12.3.5 on TYPO3. This affects the function confirmationAction. The manipulation of the argument mail with an unknown input leads to a resource injection vulnerability. CWE is classifying the issue as CWE-99. The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. This is going to have an impact on confidentiality. The summary by CVE is:

An issue was discovered in powermail extension through 12.3.5 for TYPO3. It fails to validate the mail parameter of the confirmationAction, resulting in Insecure Direct Object Reference (IDOR). An unauthenticated attacker can use this to display the user-submitted data of all forms persisted by the extension. This can only be exploited when the extension is configured to save submitted form data to the database (plugin.tx_powermail.settings.db.enable=1), which however is the default setting of the extension. The fixed versions are 7.5.0, 8.5.0, 10.9.0, and 12.4.0

It is possible to read the advisory at typo3.org. This vulnerability is uniquely identified as CVE-2024-45232 since 08/24/2024. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details of the vulnerability are known, but there is no available exploit.

Upgrading to version 7.5.0, 8.5.0, 10.9.0 or 12.4.0 eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Name

• Powermail EExtension

Version

• 12.3.0
• 12.3.1
• 12.3.2
• 12.3.3
• 12.3.4
• 12.3.5

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion