From 796cd336b37431389d8dd52eec9d91cbd2880657 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Thu, 29 Aug 2024 18:01:02 +0000
Subject: [PATCH] Publish GHSA-p652-xcgx-f85m

---
 .../GHSA-p652-xcgx-f85m.json                  | 142 ++++++++++++++++++
 1 file changed, 142 insertions(+)
 create mode 100644 advisories/github-reviewed/2024/08/GHSA-p652-xcgx-f85m/GHSA-p652-xcgx-f85m.json

diff --git a/advisories/github-reviewed/2024/08/GHSA-p652-xcgx-f85m/GHSA-p652-xcgx-f85m.json b/advisories/github-reviewed/2024/08/GHSA-p652-xcgx-f85m/GHSA-p652-xcgx-f85m.json
new file mode 100644
index 00000000000..f3e8a774574
--- /dev/null
+++ b/advisories/github-reviewed/2024/08/GHSA-p652-xcgx-f85m/GHSA-p652-xcgx-f85m.json
@@ -0,0 +1,142 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-p652-xcgx-f85m",
+  "modified": "2024-08-29T17:59:03Z",
+  "published": "2024-08-29T17:59:02Z",
+  "aliases": [
+    "CVE-2024-45232"
+  ],
+  "summary": "\"powermail\" (powermail) Insecure Direct Object Reference (IDOR)",
+  "details": "An issue was discovered in powermail extension through 12.3.5 for TYPO3. It fails to validate the mail parameter of the confirmationAction, resulting in Insecure Direct Object Reference (IDOR). An unauthenticated attacker can use this to display the user-submitted data of all forms persisted by the extension. This can only be exploited when the extension is configured to save submitted form data to the database (`plugin.tx_powermail.settings.db.enable=1`), which however is the default setting of the extension. The fixed versions are 7.5.0, 8.5.0, 10.9.0, and 12.4.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "in2code/powermail"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "11.0.0"
+            },
+            {
+              "fixed": "12.4.0"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "in2code/powermail"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "9.0.0"
+            },
+            {
+              "fixed": "10.9.0"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "in2code/powermail"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "8.0.0"
+            },
+            {
+              "fixed": "8.5.0"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "in2code/powermail"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "7.5.0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45232"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/in2code-de/powermail/commit/061756732357206f2f13bf39a0676dd266ec9586"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/in2code-de/powermail/commit/ac402d4972c77dd119c8db6ffe594c15e8ae0bc5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/in2code-de/powermail/commit/e2ddfaa06d29019d60be02b5a3da04b237ed760b"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/in2code-de/powermail/commit/f58d70311799ae5f6acbec52ea9206d21eba91bb"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/in2code/powermail/CVE-2024-45232.yaml"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/in2code-de/powermail"
+    },
+    {
+      "type": "WEB",
+      "url": "https://typo3.org/security/advisory/typo3-ext-sa-2024-006"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-639"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-08-29T17:59:02Z",
+    "nvd_published_at": "2024-08-29T00:15:09Z"
+  }
+}
\ No newline at end of file