GHSA-r674-mc9p-hvw5Medium

TYPO3 Improper Access Control vulnerability

Published
May 17, 2022
Last Modified
August 29, 2023

🔗 CVE IDs covered (1)

CVE-2013-7081 →

📋 Description

The (old) Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary HMAC signatures and bypass intended access restrictions via unspecified vectors.

🎯 Affected products4

  • composer/typo3/cms-core:>= 4.5.0, < 4.5.31
  • composer/typo3/cms-core:>= 4.7.0, < 4.7.16
  • composer/typo3/cms-core:>= 6.0.0, < 6.0.11
  • composer/typo3/cms-core:>= 6.1.0, < 6.1.6

🔗 References (5)