CVE-2023-50461
Received Received - Intake

Direct Mail Configuration Injection in TYPO3

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: MITRE

Description
An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3. The Configuration backend module of the extension allows an authenticated user to write to an arbitrary TSConfig page for folders configured as Direct Mail. Exploiting this may lead to Configuration Injection (TYPO3 10.4 and above) and to Arbitrary Code Execution (TYPO3 9.5 and below). A valid backend user account, with access to the Direct Mail Configuration backend module, is needed to exploit this.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-14
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2023-50461
EUVD
EUVD-2023-60687

Affected Vendors & Products

Showing 8 associated CPEs
Vendor Product Version / Range
typo3 direct_mail 6.0.2
typo3 direct_mail to 6.0.3 (exc)
typo3 direct_mail 7.0.0
typo3 direct_mail From 7.0.0 (inc) to 7.0.2 (inc)
typo3 direct_mail 8.0.0
typo3 direct_mail 9.5.1
typo3 direct_mail From 9.5.2 (inc)
typo3 direct_mail From 10.4 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the TYPO3 Direct Mail extension versions 6.0.2 and below, 7.0.0 to 7.0.2, and 8.0.0 to 9.5.1. It allows authenticated backend users with access to the Configuration backend module to inject arbitrary page TSConfig into folders configured for Direct Mail. In TYPO3 10.4 and above, this leads to Configuration Injection, while in versions 9.5 and below, it may result in Arbitrary Code Execution.

Detection Guidance

Check for suspicious page TSConfig modifications in folders configured for Direct Mail. Review backend user activity logs for unauthorized access to the Direct Mail Configuration module. Verify extension versions to ensure they are not vulnerable (6.0.2 and below, 7.0.0 to 7.0.2, or 8.0.0 to 9.5.1).

Commands: grep -r 'page.tsconfig' /path/to/typo3conf/ext/direct_mail/ 2>/dev/null; tail -n 100 /var/log/typo3/typo3.log | grep -i 'direct_mail'

Impact Analysis

An attacker with a valid backend user account could exploit this to inject malicious configurations or execute arbitrary code on your TYPO3 system. This could lead to unauthorized access, data breaches, or system compromise. The impact depends on the TYPO3 version and the permissions of the compromised account.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations must ensure proper access controls and patch systems to mitigate risks of non-compliance due to security flaws.

Mitigation Strategies

Update the Direct Mail extension to patched versions (6.0.3, 7.0.3, or 9.5.2). Remove or restrict access for backend users who do not require the Direct Mail Configuration module. Review and remove any suspicious page TSConfig entries in affected folders.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-50461. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart