Listen to this Post
The CVE-2025-XXXX vulnerability in the Powermail extension for TYPO3 arises due to improper access control, allowing attackers to exploit Insecure Direct Object Reference (IDOR). By manipulating file download requests, an attacker can bypass authorization checks and retrieve arbitrary files from the web server. The flaw exists because the extension fails to validate user permissions when processing file download requests, enabling unauthorized access to sensitive files. This affects versions 12.0.0 to 12.5.2 and 13.0.0.
DailyCVE Form:
Platform: TYPO3 Powermail
Version: 12.0.0-12.5.2, 13.0.0
Vulnerability: IDOR
Severity: Moderate
Date: Jul 22, 2025
Prediction: Patch by Aug 5, 2025
What Undercode Say:
curl -X GET "http://target.tld/powermail_download?file=../../config.yaml"
// Example vulnerable code snippet
if (isset($_GET['file'])) {
readfile($_GET['file']);
}
How Exploit:
- Manipulate file parameter in download requests.
- Traverse directories via `../../` sequences.
- Retrieve sensitive server files.
Protection from this CVE:
- Update to Powermail 12.5.3 or 13.0.1.
- Implement strict file access controls.
- Sanitize user input in file operations.
Impact:
- Unauthorized file disclosure.
- Potential system compromise.
- Data integrity violation.
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
