GitHub Advisoryadvisory · Packagist

GHSA-xj84-6q8f-qg2r TYPO3 Reveals Sensitive Information via Direct Request to `misc/phpcheck/`

HIGH Published 2022-05-01 Modified 2025-04-04 Official page ↗
Aliases
CVE-2005-4875
Ecosystem
Packagist
Packages
typo3/cms
Severity
High
Weaknesses
CWE-200
Reviewed
2025-04-04

Affected packages

• Packagist typo3/cms: < 3.8.1 → fixed in 3.8.1

Description

TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables.

Related

Alias · CVE (1)

  • CVE-2005-4875 TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References