TYPO3 is vulnerable to Information Disclosure in the HTML mailing API
TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2010-3673US | medium5.3 | — | ||
TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API. | ||||
02
references
External citations — patches, advisories, analysis.
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719WEB
- https://github.com/TYPO3-CMS/corePACKAGE
- https://github.com/TYPO3/typo3/commit/3e24a0fff04897826a12e5cac16b5b0a3848cf2dWEB
- https://github.com/TYPO3/typo3/commit/46693d4930d0bce64c5bdd4274224724041cef2fWEB
- https://github.com/TYPO3/typo3/commit/a3a62d99507a9e686274306df0cc1c31f4394981WEB
- https://nvd.nist.gov/vuln/detail/CVE-2010-3673ADVISORY
- https://security-tracker.debian.org/tracker/CVE-2010-3673WEB
- https://typo3.org/security/advisory/typo3-sa-2010-012/#Information_DisclosureWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan