Threats tagged 'ghsa-8wqm-6fj9-3468'

A vulnerability exists in the mail backend module configuration saving process where submitted settings are written to the page TSconfig without proper restriction. This allows backend users with access to the mail module to write arbitrary page TSconfig entries, potentially leading to unauthorized configuration changes. The issue has a medium severity with a CVSS score of 5.3. No affected versions or patch information are provided.