CVE-2025-7899 — Insecure Direct Object Reference in extension "powermail" (powermail)
The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from the webserver. This issue affects powermail version 12.0.…
Published: 2025-07-22 · CVSS: 6.0 · CVSS 4.0
The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from the webserver. This issue affects powermail version 12.0.0 up to 12.5.2 and version 13.0.0
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7