Lucene search
HistoryOct 03, 2014 - 2:55 p.m.
CVE-2014-6289
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.005
Percentile
76.9%
The Ajax dispatcher for Extbase in the Yet Another Gallery (yag) extension before 3.0.1 and Tools for Extbase development (pt_extbase) extension before 1.5.1 allows remote attackers to bypass access restrictions and execute arbitrary controller actions via unspecified vectors.
Affected configurations
Node
daniel_lienertyet_another_galleryRange≤3.0.0typo3
ORmichael_knolltools_for_extbase_developmenRange≤1.5.0typo3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| daniel_lienert | yet_another_gallery | * | cpe:2.3:a:daniel_lienert:yet_another_gallery:*:*:*:*:*:typo3:*:* |
| michael_knoll | tools_for_extbase_developmen | * | cpe:2.3:a:michael_knoll:tools_for_extbase_developmen:*:*:*:*:*:typo3:*:* |
Related
cvelist
cvelist
CVE-2014-6289
2014-10-03 14:00:00
typo3
typo3
prion
prion
Authentication flaw
2014-10-03 14:55:00
cve
cve
CVE-2014-6289
2014-10-03 14:55:08
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.005
Percentile
76.9%
Related for NVD:CVE-2014-6289