Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-772m-43f3-hmf8

Опубликовано: 07 июн. 2024
Источник: github
Github: Прошло ревью
CVSS3: 6.5

Описание

TYPO3 Broken Access Control in Localization Handling

It has been discovered that backend users having limited access to specific languages are capable of modifying and creating pages in the default language which actually should be disallowed. A valid backend user account is needed in order to exploit this vulnerability.

Пакеты

Наименование

typo3/cms

composer
Затронутые версииВерсия исправления

>= 8.0.0, < 8.7.23

8.7.23

6.5 Medium

CVSS3

Дефекты

CWE-285

6.5 Medium

CVSS3

Дефекты

CWE-285