https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 10:14:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-232229 EUVD-2026-232229 https://cve.radiocsirt.org/vuln/euvd-2026-232229 https://cve.radiocsirt.org/vuln/fkie_cve-2022-47408 <p>An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. There is a CAPTCHA bypass that can lead to subscribing many people.</p> <p>An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. There is a CAPTCHA bypass that can lead to subscribing many people.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-47408 https://cve.radiocsirt.org/vuln/ghsa-f683-35w9-28g5 <p><strong>Affected:</strong> Packagist: fixpunkt/fp-newsletter</p> <p>The CAPTCHA of the extension can be bypassed which may result in automated creation of various newsletter subscribers. It is possible to provide arbitrary subscription UIDs to the `deleteAction` of the extension resulting in all newsletter subscribers to be unsubscribed. Insufficient access checks in the `createAction` and `unsubscribeAction` can be used to obtain data of existing newsletter subscribers.</p> <p><strong>Affected:</strong> Packagist: fixpunkt/fp-newsletter</p> <p>The CAPTCHA of the extension can be bypassed which may result in automated creation of various newsletter subscribers. It is possible to provide arbitrary subscription UIDs to the `deleteAction` of the extension resulting in all newsletter subscribers to be unsubscribed. Insufficient access checks in the `createAction` and `unsubscribeAction` can be used to obtain data of existing newsletter subscribers.</p> https://cve.radiocsirt.org/vuln/ghsa-f683-35w9-28g5 https://cve.radiocsirt.org/vuln/gsd-2022-47408 gsd-2022-47408 https://cve.radiocsirt.org/vuln/gsd-2022-47408