Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47350
HistoryJun 04, 2024 - 9:32 a.m.

Information Disclosure

2024-06-0409:32:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
information disclosure
inline javascript settings
requirejs package
installed system
third-party extensions
vulnerability

6.6 Medium

AI Score

Confidence

Low

typo3/cms-core is vulnerable to Information Disclosure. The vulnerability is due to Inline JavaScript settings within the RequireJS package, which allows an attacker to retrieve additional information about the installed system and third-party extensions.

6.6 Medium

AI Score

Confidence

Low