Lucene search
GoogleOSV:GHSA-VCCP-5V5H-P8M6HistoryMay 17, 2022 - 4:42 a.m.
Typo3 Information Disclosure
2022-05-1704:42:47
Google
osv.dev
6
0.001 Low
EPSS
Percentile
46.2%
Failing to respect user groups of logged in users when caching queries, Extbase is susceptible to information disclosure. The query caching (introduced in Extbase 6.2) used to cache queries that query results for a specific user group were presented to a different group.
References
typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-001
www.debian.org/security/2014/dsa-2942
www.openwall.com/lists/oss-security/2014/06/03/2
github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2014-3946.yaml
nvd.nist.gov/vuln/detail/CVE-2014-3946
typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-001
Related
friendsofphp
friendsofphp
Information disclosure in the Extbase framework
2014-05-22 09:33:36
nvd
nvd
CVE-2014-3946
2014-06-03 14:55:11
cvelist
cvelist
CVE-2014-3946
2014-06-03 14:00:00
veracode
veracode
Information Disclosure
2017-07-30 08:05:59
ubuntucve
ubuntucve
CVE-2014-3946
2014-06-03 00:00:00
cve
cve
CVE-2014-3946
2014-06-03 14:55:11
github
github
Typo3 Information Disclosure
2022-05-17 04:42:47
prion
prion
Design/Logic Flaw
2014-06-03 14:55:00
openvas
openvas
TYPO3 6.2.0 - 6.2.2 Multiple Vulnerabilities (TYPO3-CORE-SA-2014-001)
2014-07-03 00:00:00
Debian: Security Advisory (DSA-2942-1)
2014-05-31 00:00:00
Debian Security Advisory DSA 2942-1 (typo3-src - security update)
2014-06-01 00:00:00
osv
osv
typo3-src - security update
2014-06-01 00:00:00
typo3
typo3
Multiple Vulnerabilities in TYPO3 CMS
2014-05-22 00:00:00
securityvulns
securityvulns