GitHub Advisoryadvisory · Packagist

GHSA-q68v-vcjg-r3vp TYPO3 allows remote attackers to obtain the database name via a direct request

MEDIUM Published 2022-05-17 Modified 2025-04-12 Official page ↗
Aliases
CVE-2012-1607
Ecosystem
Packagist
Packages
typo3/cms
Severity
Moderate
Weaknesses
CWE-200
Reviewed
2025-04-12

Affected packages

• Packagist typo3/cms: >= 4.4.0, <= 4.4.13 (no fix yet) • Packagist typo3/cms: >= 4.5.0, <= 4.5.13 (no fix yet) • Packagist typo3/cms: >= 4.6.0, <= 4.6.6 (no fix yet)

Description

The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the database name via a direct request.

Related

Alias · CVE (1)

  • CVE-2012-1607 The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References