4

CVE-2013-7073

The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, which allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Typo3 ≫ Typo3 Version4.5.0
Typo3 ≫ Typo3 Version4.5.1
Typo3 ≫ Typo3 Version4.5.2
Typo3 ≫ Typo3 Version4.5.3
Typo3 ≫ Typo3 Version4.5.4
Typo3 ≫ Typo3 Version4.5.5
Typo3 ≫ Typo3 Version4.5.6
Typo3 ≫ Typo3 Version4.5.7
Typo3 ≫ Typo3 Version4.5.8
Typo3 ≫ Typo3 Version4.5.9
Typo3 ≫ Typo3 Version4.5.10
Typo3 ≫ Typo3 Version4.5.11
Typo3 ≫ Typo3 Version4.5.12
Typo3 ≫ Typo3 Version4.5.13
Typo3 ≫ Typo3 Version4.5.14
Typo3 ≫ Typo3 Version4.5.15
Typo3 ≫ Typo3 Version4.5.16
Typo3 ≫ Typo3 Version4.5.17
Typo3 ≫ Typo3 Version4.5.18
Typo3 ≫ Typo3 Version4.5.19
Typo3 ≫ Typo3 Version4.5.20
Typo3 ≫ Typo3 Version4.5.21
Typo3 ≫ Typo3 Version4.5.22
Typo3 ≫ Typo3 Version4.5.23
Typo3 ≫ Typo3 Version4.5.24
Typo3 ≫ Typo3 Version4.5.25
Typo3 ≫ Typo3 Version4.5.26
Typo3 ≫ Typo3 Version4.5.27
Typo3 ≫ Typo3 Version4.5.28
Typo3 ≫ Typo3 Version4.5.29
Typo3 ≫ Typo3 Version4.5.30
Typo3 ≫ Typo3 Version4.5.31
Typo3 ≫ Typo3 Version6.1
Typo3 ≫ Typo3 Version6.1.1
Typo3 ≫ Typo3 Version6.1.2
Typo3 ≫ Typo3 Version6.1.3
Typo3 ≫ Typo3 Version6.1.4
Typo3 ≫ Typo3 Version6.1.5
Typo3 ≫ Typo3 Version6.1.6
Typo3 ≫ Typo3 Version6.0
Typo3 ≫ Typo3 Version6.0.1
Typo3 ≫ Typo3 Version6.0.2
Typo3 ≫ Typo3 Version6.0.3
Typo3 ≫ Typo3 Version6.0.4
Typo3 ≫ Typo3 Version6.0.5
Typo3 ≫ Typo3 Version6.0.6
Typo3 ≫ Typo3 Version6.0.7
Typo3 ≫ Typo3 Version6.0.8
Typo3 ≫ Typo3 Version6.0.9
Typo3 ≫ Typo3 Version6.0.10
Typo3 ≫ Typo3 Version6.0.11
Typo3 ≫ Typo3 Version4.7.0
Typo3 ≫ Typo3 Version4.7.1
Typo3 ≫ Typo3 Version4.7.2
Typo3 ≫ Typo3 Version4.7.3
Typo3 ≫ Typo3 Version4.7.4
Typo3 ≫ Typo3 Version4.7.5
Typo3 ≫ Typo3 Version4.7.6
Typo3 ≫ Typo3 Version4.7.7
Typo3 ≫ Typo3 Version4.7.8
Typo3 ≫ Typo3 Version4.7.9
Typo3 ≫ Typo3 Version4.7.10
Typo3 ≫ Typo3 Version4.7.11
Typo3 ≫ Typo3 Version4.7.12
Typo3 ≫ Typo3 Version4.7.13
Typo3 ≫ Typo3 Version4.7.14
Typo3 ≫ Typo3 Version4.7.15
Typo3 ≫ Typo3 Version4.7.16
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.27% 0.659
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00028.html
http://lists.opensuse.org/opensuse-updates/2016-08/msg00083.html
http://seclists.org/oss-sec/2013/q4/473
http://seclists.org/oss-sec/2013/q4/487
http://www.debian.org/security/2014/dsa-2834
http://lists.opensuse.org/opensuse-updates/2016-08/msg00106.html
http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/
Vendor Advisory