What is CVE-2013-7400?

CVE-2013-7400 is a high-severity vulnerability in Dkd Direct Mail, classified under Information Disclosure. CVSS score: 7.5/10. Published 2017-12-29.

How severe is CVE-2013-7400?

High severity. CVSS v3 base score is 7.5 out of 10.

Information disclosure in Dkd Direct Mail

CVE-2013-7400

The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information by leveraging improper checking of authentication codes.

Vulnerability class: Information Disclosure

Published 2017-12-29 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

EPSS exploit prediction

EPSS: 0.017 (75.8th percentile), scored 2026-09-29.

Low probability of exploitation in the next 30 days, but still tracked. 76th percentile — 75.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.017 · newest: 0.017 · change: 0.000

Affected products

Dkd Direct Mail

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-… (Vendor Advisory)
extensions.typo3.org/extension/direct_mail/ (Product, Release Notes, Vendor Advisory)
www.openwall.com/lists/oss-security/2014/09/11/4 (mailing-list, Mailing List, Issue Tracking)

Frequently asked questions

What is CVE-2013-7400?: CVE-2013-7400 is a high-severity vulnerability in Dkd Direct Mail, classified under Information Disclosure. CVSS score: 7.5/10. Published 2017-12-29.
How severe is CVE-2013-7400?: High severity. CVSS v3 base score is 7.5 out of 10.