Lucene search
GitHub Advisory DatabaseGHSA-R674-MC9P-HVW5HistoryMay 17, 2022 - 4:54 a.m.
TYPO3 Improper Access Control vulnerability
2022-05-1704:54:37
CWE-284
GitHub Advisory Database
github.com
6
4.9 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
53.1%
The (old) Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary HMAC signatures and bypass intended access restrictions via unspecified vectors.
Affected configurations
Node
typo3cms_poll_system_extensionRange<6.1.6
ORtypo3cms_poll_system_extensionRange<6.0.11
ORtypo3cms_poll_system_extensionRange<4.7.16
ORtypo3cms_poll_system_extensionRange<4.5.31
| CPE | Name | Operator | Version |
|---|---|---|---|
| typo3/cms-core | lt | 6.1.6 | |
| typo3/cms-core | lt | 6.0.11 | |
| typo3/cms-core | lt | 4.7.16 | |
| typo3/cms-core | lt | 4.5.31 |
Related
prion
prion
Design/Logic Flaw
2013-12-23 23:55:00
cvelist
cvelist
CVE-2013-7081
2013-12-23 23:00:00
cve
cve
CVE-2013-7081
2013-12-23 23:55:04
nvd
nvd
CVE-2013-7081
2013-12-23 23:55:04
osv
osv
TYPO3 Improper Access Control vulnerability
2022-05-17 04:54:37
ubuntucve
ubuntucve
CVE-2013-7081
2013-12-23 00:00:00
openvas
openvas
TYPO3 Multiple Vulnerabilities (Dec 2013)
2014-01-06 00:00:00
Debian Security Advisory DSA 2834-1 (typo3-src - several vulnerabilities)
2014-01-01 00:00:00
Debian: Security Advisory (DSA-2834-1)
2013-12-31 00:00:00
debian
debian
[SECURITY] [DSA 2834-1] typo3-src security update
2014-01-01 16:19:19
[SECURITY] [DSA 2834-1] typo3-src security update
2014-01-01 16:19:19
securityvulns
securityvulns
[SECURITY] [DSA 2834-1] typo3-src security update
2014-01-09 00:00:00
nessus
nessus
Debian DSA-2834-1 : typo3-src - several vulnerabilities
2014-01-02 00:00:00
typo3
typo3
Multiple Vulnerabilities in TYPO3 CMS
2013-12-10 00:00:00
4.9 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
53.1%
Related for GHSA-R674-MC9P-HVW5