Описание
TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 4.5.10+dfsg1-1 |
| hardy | ignored | end of life |
| lucid | ignored | end of life |
| maverick | ignored | end of life |
| natty | released | 4.3.9+dfsg1-1+squeeze1build0.11.04.1 |
| oneiric | ignored | end of life |
| precise | not-affected | 4.5.10+dfsg1-1 |
| quantal | not-affected | 4.5.10+dfsg1-1 |
| raring | not-affected | 4.5.10+dfsg1-1 |
| saucy | not-affected | 4.5.10+dfsg1-1 |
Показывать по
10
4 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
CVSS3: 6.5
nvd
больше 6 лет назад
TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services.
CVSS3: 6.5
debian
больше 6 лет назад
TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access ...
4 Medium
CVSS2
6.5 Medium
CVSS3