CVE-2022-47411

CVE-2022-47411 is a high-severity information disclosure vulnerability affecting the fp_newsletter extension for TYPO3, specifically versions before 1.1.1, 2.x before 2.1.2, and 3.x before 3.2.6. An unauthenticated attacker can obtain sensitive subscriber data through unsubscribeAction operations. The CVSSv3.1 score is 7.5, indicating a high risk due to its low attack complexity and high confidentiality impact. There is no evidence of active exploitation, nor are there public exploit codes available in Metasploit, Nuclei, or ExploitDB, though it has garnered some community discussion.