Lucene search
OpenJS FoundationFRIENDSOFPHP:TYPO3:CMS-CORE:CVE-2022-23504HistoryDec 13, 2022 - 9:19 a.m.
TYPO3-CORE-SA-2022-016: Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
2022-12-1309:19:27
OpenJS Foundation
github.com
7
typo3
security advisory
information disclosure
yaml placeholder
site configuration
5.7 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L
7.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
36.8%
Affected configurations
Node
typo3cms_poll_system_extensionRange<12.1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| typo3/cms-core | lt | 12.1.1 |
Related
openvas
openvas
osv
osv
TYPO3 CMS vulnerable to Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
2022-12-13 17:13:37
BIT-typo3-2022-23504
2024-03-06 11:09:48
CVE-2022-23504
2022-12-14 08:15:10
github
github
veracode
veracode
Information Disclosure
2022-12-15 05:42:44
cvelist
cvelist
nvd
nvd
CVE-2022-23504
2022-12-14 08:15:10
prion
prion
Information disclosure
2022-12-14 08:15:00
friendsofphp
friendsofphp
ubuntucve
ubuntucve
CVE-2022-23504
2022-12-14 00:00:00
nessus
nessus
cve
cve
CVE-2022-23504
2022-12-14 08:15:10
freebsd
freebsd
typo3 -- multiple vulnerabilities
2022-12-13 00:00:00
5.7 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L
7.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
36.8%
Related for FRIENDSOFPHP:TYPO3:CMS-CORE:CVE-2022-23504