PatchTheCVE: dkdhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-12700: The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber dahttps://patchthecve.com/cve/CVE-2020-12700.htmlhttps://patchthecve.com/cve/CVE-2020-12700.htmlWed, 17 Jun 2026 02:52:09 +0000MEDIUM 4.3: The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.CVE-2020-12699: The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.https://patchthecve.com/cve/CVE-2020-12699.htmlhttps://patchthecve.com/cve/CVE-2020-12699.htmlWed, 17 Jun 2026 02:52:09 +0000MEDIUM 6.1: The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.CVE-2020-12698: The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.https://patchthecve.com/cve/CVE-2020-12698.htmlhttps://patchthecve.com/cve/CVE-2020-12698.htmlWed, 17 Jun 2026 02:52:09 +0000MEDIUM 4.3: The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.CVE-2020-12697: The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.https://patchthecve.com/cve/CVE-2020-12697.htmlhttps://patchthecve.com/cve/CVE-2020-12697.htmlWed, 17 Jun 2026 02:52:09 +0000MEDIUM 5.3: The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.