CVE-2016-5091

Опубликовано: 23 янв. 2017

Источник: nvd

CVSS3: 8.1

CVSS2: 6.8

EPSS Низкий

Описание

Extbase in TYPO3 4.3.0 before 6.2.24, 7.x before 7.6.8, and 8.1.1 allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted Extbase action.

Ссылки

http://www.openwall.com/lists/oss-security/2016/05/25/4
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/05/26/2
Mailing List
Third Party Advisory
https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-013/
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/05/25/4
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/05/26/2
Mailing List
Third Party Advisory
https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-013/
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*

Версия до 6.2.23 (включая)

cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:7.0.2:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:7.1.0:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:7.2.0:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:7.3.0:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:7.3.1:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:7.4.0:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:7.5.0:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:7.6.0:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:7.6.1:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:7.6.2:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:7.6.3:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:7.6.4:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:7.6.5:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:7.6.6:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:7.6.7:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:7.6.8:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:8.1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02369

Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-254

Связанные уязвимости

CVE-2016-5091

CVSS3: 8.1

ubuntu

около 9 лет назад

Extbase in TYPO3 4.3.0 before 6.2.24, 7.x before 7.6.8, and 8.1.1 allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted Extbase action.

CVE-2016-5091

CVSS3: 8.1

debian

около 9 лет назад

Extbase in TYPO3 4.3.0 before 6.2.24, 7.x before 7.6.8, and 8.1.1 allo ...

GHSA-jxg5-35fj-ccwf

CVSS3: 8.1

github

больше 3 лет назад

Extbase for TYPO3 allows RCE

BDU:2020-04846

CVSS3: 9.8

fstec

больше 5 лет назад

Уязвимость расширения extbase системы управления контентом TYPO3, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 85%

0.02369

Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-254