CVEvulnerability
CVE-2013-7081
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
The (old) Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary HMAC signatures and bypass intended access restrictions via unspecified vectors.
Affected configurations
• typo3 typo3 6.0
• typo3 typo3 6.0.1
• typo3 typo3 6.0.2
• typo3 typo3 6.0.3
• typo3 typo3 6.0.4
• typo3 typo3 6.0.5
• typo3 typo3 6.0.6
• typo3 typo3 6.0.7
• typo3 typo3 6.0.8
• typo3 typo3 6.0.9
• typo3 typo3 6.0.10
• typo3 typo3 6.0.11
• typo3 typo3 6.1
• typo3 typo3 6.1.1
• typo3 typo3 6.1.2
• typo3 typo3 6.1.3
• typo3 typo3 6.1.4
• typo3 typo3 6.1.5
• typo3 typo3 6.1.6
• typo3 typo3 4.7.0
• typo3 typo3 4.7.1
• typo3 typo3 4.7.2
• typo3 typo3 4.7.3
• typo3 typo3 4.7.4
• typo3 typo3 4.7.5
• typo3 typo3 4.7.6
• typo3 typo3 4.7.7
• typo3 typo3 4.7.8
• typo3 typo3 4.7.9
• typo3 typo3 4.7.10
• typo3 typo3 4.7.11
• typo3 typo3 4.7.12
• typo3 typo3 4.7.13
• typo3 typo3 4.7.14
• typo3 typo3 4.7.15
• typo3 typo3 4.7.16
• typo3 typo3 4.5.0
• typo3 typo3 4.5.1
• typo3 typo3 4.5.2
• typo3 typo3 4.5.3
• typo3 typo3 4.5.4
• typo3 typo3 4.5.5
• typo3 typo3 4.5.6
• typo3 typo3 4.5.7
• typo3 typo3 4.5.8
• typo3 typo3 4.5.9
• typo3 typo3 4.5.10
• typo3 typo3 4.5.11
• typo3 typo3 4.5.12
• typo3 typo3 4.5.13
• typo3 typo3 4.5.14
• typo3 typo3 4.5.15
• typo3 typo3 4.5.16
• typo3 typo3 4.5.17
• typo3 typo3 4.5.18
• typo3 typo3 4.5.19
• typo3 typo3 4.5.20
• typo3 typo3 4.5.21
• typo3 typo3 4.5.22
• typo3 typo3 4.5.23
… and 8 more
Related
Weakness · not in database (1)
References
- http://seclists.org/oss-sec/2013/q4/473 seclists.org
- http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/ Vendor Advisory
- http://www.debian.org/security/2014/dsa-2834 www.debian.org
- http://seclists.org/oss-sec/2013/q4/473 seclists.org
- http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/ Vendor Advisory
- http://www.debian.org/security/2014/dsa-2834 www.debian.org