CVE-2013-7073

Name of the Vulnerable Software and Affected Versions TYPO3 versions 4.5.0 through 4.5.31 TYPO3 versions 4.7.0 through 4.7.16 TYPO3 versions 6.0.0 through 6.0.11 TYPO3 versions 6.1.0 through 6.1.6

Description The issue concerns the Content Editing Wizards component, which fails to check permissions. This allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters.

Recommendations For versions 4.5.0 through 4.5.31, update to a version that includes the necessary permission checks. For versions 4.7.0 through 4.7.16, update to a version that includes the necessary permission checks. For versions 6.0.0 through 6.0.11, update to a version that includes the necessary permission checks. For versions 6.1.0 through 6.1.6, update to a version that includes the necessary permission checks.