https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:09:55.165812+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-7899 CVE-2025-7899 — Insecure Direct Object Reference in extension "powermail" (powermail) 2026-10-02T11:09:55.201502+00:00

Affected: TYPO3 Extension "powermail"

The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from the webserver. This issue affects powermail version 12.0.0 up to 12.5.2 and version 13.0.0