GitHub Advisoryadvisory · Packagist

GHSA-c7p6-3c9c-f88q Information Disclosure in TYPO3 CMS

LOW Published 2024-06-05 Modified 2024-06-05 Official page ↗

Ecosystem: Packagist
Packages: typo3/cms
Severity: Low
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Reviewed: 2024-06-05

Affected packages

• Packagist typo3/cms: >= 7.6.0, < 7.6.22 → fixed in 7.6.22 • Packagist typo3/cms: >= 8.0.0, < 8.7.5 → fixed in 8.7.5

Description

HTTP requests being performed using the TYPO3 API expose the specific TYPO3 version to the called endpoint.

References