Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-120331— Server-Side Request Forgery in extension "Mail" (mail)

Quick assessment

Affected
TYPO3 Extension "Mail"
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

服务器在获取外部 URL 邮件的内容、样式表及待嵌入的图片时，未对目标主机进行验证。拥有邮件模块访问权限的后端用户可诱导服务器向内部网络中的主机发起请求。

CVSS 5.3 · Medium
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-120331

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Server-Side Request Forgery in extension "Mail" (mail)
Source: CVE Program / CVE List V5
Vulnerability Description
Content of external URL mails, their stylesheets and images to embed is fetched by the server without validating the target host. Backend users with access to the mail module can make the server send requests to hosts in the internal network.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
TYPO3 Extension "Mail" 4.0.0 ~ 4.2.0 -

II. Public POCs for CVE-2026-120331

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-120331

请登录查看更多情报信息。

Other References for CVE-2026-120331 (1)

Same Patch Batch · TYPO3 · 2026-11-03 · 7 CVEs total

CVE-2026-120333 8.8 HIGH Broken Access Control in extension "Frontend User Registration" (sf_register)
CVE-2026-120330 7.1 HIGH Broken Access Control in extension "Mail" (mail)
CVE-2026-120328 6.9 MEDIUM Information Disclosure in extension "Mail" (mail)
CVE-2026-120327 5.3 MEDIUM Open Redirection in extension "Mail" (mail)
CVE-2026-120329 5.3 MEDIUM Broken Access Control in extension "Mail" (mail)
CVE-2026-120332 5.1 MEDIUM Cross-Site Scripting in extension "Mail" (mail)

IV. Related Vulnerabilities

Same product: Extension "Mail"
Same vendor: TYPO3
Same weakness: CWE-918