GHSA-48ww-8h7g-4hwqMediumCVSS 5.3
TYPO3 is vulnerable to Spam Abuse in the native form content element
🔗 CVE IDs covered (1)
📋 Description
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element. An attacker could abuse the form to send mails to arbitrary email addresses.
🎯 Affected products4
- composer/typo3/cms-frontend:< 4.1.14
- composer/typo3/cms-frontend:>= 4.2.0, < 4.2.13
- composer/typo3/cms-frontend:>= 4.3.0, < 4.3.4
- composer/typo3/cms-frontend:>= 4.4.0, < 4.4.1
🔗 References (9)
- https://nvd.nist.gov/vuln/detail/CVE-2010-3667
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719
- https://security-tracker.debian.org/tracker/CVE-2010-3667
- https://typo3.org/security/advisory/typo3-sa-2010-012/#Spam_Abuse
- https://github.com/TYPO3/typo3/commit/34da374183dd472fa7987ee25b47544a06bd2173
- https://github.com/TYPO3/typo3/commit/5eb60976cea268b879e02811208e6a1777674cbb
- https://github.com/TYPO3/typo3/commit/78dbe326df7ebc612f40882920a426c82b2ca9d3
- https://github.com/TYPO3/typo3/commit/f82696c7d62842edb0bf79ef21a85d56735a1527
- https://github.com/advisories/GHSA-48ww-8h7g-4hwq