Lucene search

K
friendsofphpOpenJS FoundationFRIENDSOFPHP:TYPO3:CMS:CVE-2022-23504
HistoryDec 13, 2022 - 9:19 a.m.

TYPO3-CORE-SA-2022-016: Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration

2022-12-1309:19:27
OpenJS Foundation
github.com
5
typo3
core
sa
2022
sensitive information
disclosure
yaml
placeholder
expressions
site configuration
security advisory
software

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

38.7%

Affected configurations

Vulners
Node
typo3typo3_cmsRange<12.1.1
VendorProductVersionCPE
typo3typo3_cms*cpe:2.3:a:typo3:typo3_cms:*:*:*:*:*:*:*:*

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

38.7%