Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 4

Количество 4

ubuntu логотип

CVE-2012-1605

почти 14 лет назад

The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to "a missing signature (HMAC) for a request argument." To our knowledge it is neither possible to inject code through this vulnerability, nor are there exploitable objects within the TYPO3 Core. However, there might be exploitable objects within third party extensions.

CVSS2: 5
EPSS: Низкий
nvd логотип

CVE-2012-1605

почти 14 лет назад

The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to "a missing signature (HMAC) for a request argument."

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2012-1605

почти 14 лет назад

The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unser ...

CVSS2: 5
EPSS: Низкий
github логотип

GHSA-7jfm-px59-99w8

больше 4 лет назад

Typo3 Extbase Framework Unsafe Deserialization

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2012-1605

The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to "a missing signature (HMAC) for a request argument." To our knowledge it is neither possible to inject code through this vulnerability, nor are there exploitable objects within the TYPO3 Core. However, there might be exploitable objects within third party extensions.

CVSS2: 5
2%
Низкий
почти 14 лет назад
nvd логотип
CVE-2012-1605

The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to "a missing signature (HMAC) for a request argument."

CVSS2: 5
2%
Низкий
почти 14 лет назад
debian логотип
CVE-2012-1605

The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unser ...

CVSS2: 5
2%
Низкий
почти 14 лет назад
github логотип
GHSA-7jfm-px59-99w8

Typo3 Extbase Framework Unsafe Deserialization

2%
Низкий
больше 4 лет назад

Уязвимостей на страницу