CVEvulnerability
CVE-2013-7073
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, which allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters.
Affected configurations
• typo3 typo3 4.5.0
• typo3 typo3 4.5.1
• typo3 typo3 4.5.2
• typo3 typo3 4.5.3
• typo3 typo3 4.5.4
• typo3 typo3 4.5.5
• typo3 typo3 4.5.6
• typo3 typo3 4.5.7
• typo3 typo3 4.5.8
• typo3 typo3 4.5.9
• typo3 typo3 4.5.10
• typo3 typo3 4.5.11
• typo3 typo3 4.5.12
• typo3 typo3 4.5.13
• typo3 typo3 4.5.14
• typo3 typo3 4.5.15
• typo3 typo3 4.5.16
• typo3 typo3 4.5.17
• typo3 typo3 4.5.18
• typo3 typo3 4.5.19
• typo3 typo3 4.5.20
• typo3 typo3 4.5.21
• typo3 typo3 4.5.22
• typo3 typo3 4.5.23
• typo3 typo3 4.5.24
• typo3 typo3 4.5.25
• typo3 typo3 4.5.26
• typo3 typo3 4.5.27
• typo3 typo3 4.5.28
• typo3 typo3 4.5.29
• typo3 typo3 4.5.30
• typo3 typo3 4.5.31
• typo3 typo3 6.1
• typo3 typo3 6.1.1
• typo3 typo3 6.1.2
• typo3 typo3 6.1.3
• typo3 typo3 6.1.4
• typo3 typo3 6.1.5
• typo3 typo3 6.1.6
• typo3 typo3 6.0
• typo3 typo3 6.0.1
• typo3 typo3 6.0.2
• typo3 typo3 6.0.3
• typo3 typo3 6.0.4
• typo3 typo3 6.0.5
• typo3 typo3 6.0.6
• typo3 typo3 6.0.7
• typo3 typo3 6.0.8
• typo3 typo3 6.0.9
• typo3 typo3 6.0.10
• typo3 typo3 6.0.11
• typo3 typo3 4.7.0
• typo3 typo3 4.7.1
• typo3 typo3 4.7.2
• typo3 typo3 4.7.3
• typo3 typo3 4.7.4
• typo3 typo3 4.7.5
• typo3 typo3 4.7.6
• typo3 typo3 4.7.7
• typo3 typo3 4.7.8
… and 8 more
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00028.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2016-08/msg00083.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2016-08/msg00106.html lists.opensuse.org
- http://seclists.org/oss-sec/2013/q4/473 seclists.org
- http://seclists.org/oss-sec/2013/q4/487 seclists.org
- http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/ Vendor Advisory
- http://www.debian.org/security/2014/dsa-2834 www.debian.org
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00028.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2016-08/msg00083.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2016-08/msg00106.html lists.opensuse.org
- http://seclists.org/oss-sec/2013/q4/473 seclists.org
- http://seclists.org/oss-sec/2013/q4/487 seclists.org
- http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/ Vendor Advisory
- http://www.debian.org/security/2014/dsa-2834 www.debian.org