GitHub Advisoryadvisory · Packagist

GHSA-q7j5-9j77-g4gq Remote code execution in turn extension for TYPO3

HIGH Published 2020-07-29 Modified 2021-07-29 Official page ↗

Aliases: CVE-2020-15515
Ecosystem: Packagist
Packages: marcwillmann/turn
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-74
Reviewed: 2020-07-29

Affected packages

• Packagist marcwillmann/turn: < 0.3.3 → fixed in 0.3.3

Description

The turn extension through 0.3.2 for TYPO3 allows Remote Code Execution.

Related

Alias · CVE (1)

CVE-2020-15515 The turn extension through 0.3.2 for TYPO3 allows Remote Code Execution. vulnerability

Weakness · CWE (1)

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness

References