GitHub Advisoryadvisory · Packagist

GHSA-cv9j-78f7-w6v9 Incorrect Authorization in TYPO3 extension

MEDIUM Published 2021-07-26 Modified 2021-07-28 Official page ↗
Aliases
CVE-2020-25025
Ecosystem
Packagist
Packages
localizationteam/l10nmgr
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-863
Reviewed
2021-07-26

Affected packages

• Packagist localizationteam/l10nmgr: < 7.4.0 → fixed in 7.4.0 • Packagist localizationteam/l10nmgr: >= 8.0.0, < 8.7.0 → fixed in 8.7.0 • Packagist localizationteam/l10nmgr: >= 9.0.0, < 9.2.0 → fixed in 9.2.0

Description

The l10nmgr (aka Localization Manager) extension before 7.4.0, 8.x before 8.7.0, and 9.x before 9.2.0 for TYPO3 allows Information Disclosure (translatable fields).

Related

Alias · CVE (1)

  • CVE-2020-25025 The l10nmgr (aka Localization Manager) extension before 7.4.0, 8.x before 8.7.0, and 9.x before 9.2.0 for TYPO3 allows Information… vulnerability

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References