Описание
The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, which allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:typo3:typo3:4.5.0:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.1:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.2:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.3:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.4:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.5:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.6:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.7:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.8:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.9:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.10:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.11:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.12:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.13:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.14:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.15:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.16:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.17:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.18:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.19:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.20:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.21:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.22:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.23:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.24:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.25:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.26:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.27:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.28:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.29:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.30:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.31:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:a:typo3:typo3:6.1:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.1.1:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.1.2:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.1.3:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.1.4:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.1.5:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.1.6:*:*:*:*:*:*:*
Конфигурация 3
Одно из
cpe:2.3:a:typo3:typo3:6.0:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.0.4:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.0.5:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.0.6:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.0.7:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.0.8:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.0.9:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.0.10:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.0.11:*:*:*:*:*:*:*
Конфигурация 4
Одно из
cpe:2.3:a:typo3:typo3:4.7.0:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.7.1:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.7.2:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.7.3:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.7.4:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.7.5:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.7.6:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.7.7:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.7.8:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.7.9:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.7.10:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.7.11:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.7.12:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.7.13:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.7.14:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.7.15:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.7.16:*:*:*:*:*:*:*
EPSS
Процентиль: 51%
0.00275
Низкий
4 Medium
CVSS2
Дефекты
CWE-264
Связанные уязвимости
ubuntu
около 12 лет назад
The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, which allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters.
debian
около 12 лет назад
The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4 ...
CVSS3: 6.5
github
больше 3 лет назад
TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component
EPSS
Процентиль: 51%
0.00275
Низкий
4 Medium
CVSS2
Дефекты
CWE-264