GitHub Advisoryadvisory · Packagist

GHSA-rwx5-7x5r-jgrm Typo3 Information Disclosure

MEDIUM Published 2022-04-22 Modified 2024-01-12 Official page ↗

Aliases: CVE-2011-4900
Ecosystem: Packagist
Packages: typo3/cms
Severity: Moderate
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-200
Reviewed: 2024-01-12

Affected packages

• Packagist typo3/cms: < 4.5.4 → fixed in 4.5.4

Description

TYPO3 before 4.5.4 allows Information Disclosure in the backend.

Related

Alias · CVE (1)

CVE-2011-4900 TYPO3 before 4.5.4 allows Information Disclosure in the backend. vulnerability

Weakness · CWE (1)

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References