PT-2013-6256
CVE-2013-7073
·
تاريخ النشر
2013-12-23
·
تاريخ التحديث
2022-05-17
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
TYPO3 versions 4.5.0 through 4.5.31
TYPO3 versions 4.7.0 through 4.7.16
TYPO3 versions 6.0.0 through 6.0.11
TYPO3 versions 6.1.0 through 6.1.6
Description
The issue concerns the Content Editing Wizards component, which fails to check permissions. This allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters.
Recommendations
For versions 4.5.0 through 4.5.31, update to a version that includes the necessary permission checks.
For versions 4.7.0 through 4.7.16, update to a version that includes the necessary permission checks.
For versions 6.0.0 through 6.0.11, update to a version that includes the necessary permission checks.
For versions 6.1.0 through 6.1.6, update to a version that includes the necessary permission checks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾