Description
The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, which allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2834-1 | typo3-src security update |
EUVD |
EUVD-2022-2443 | The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, which allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters. |
Github GHSA |
GHSA-4rpv-g4gq-rh4m | TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T17:53:46.010Z
Reserved: 2013-12-11T00:00:00.000Z
Link: CVE-2013-7073
No data.
Status : Deferred
Published: 2013-12-23T23:55:04.297
Modified: 2025-04-11T00:51:21.963
Link: CVE-2013-7073
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD
Github GHSA