GHSA-r674-mc9p-hvw5

ghsaUSosv

TYPO3 Improper Access Control vulnerability

view advisory published 2022-05-17Licence: CC-BY-4.0

The (old) Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary HMAC signatures and bypass intended access restrictions via unspecified vectors.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2013-7081US	medium4.9	1.02% (63rd)	—	2013-12-23
The (old) Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to g…

references

External citations — patches, advisories, analysis.

http://seclists.org/oss-sec/2013/q4/473WEB
http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004WEB
http://www.debian.org/security/2014/dsa-2834WEB
https://github.com/TYPO3-CMS/corePACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2013-7081ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan