GHSA-xj84-6q8f-qg2rHigh

TYPO3 Reveals Sensitive Information via Direct Request to `misc/phpcheck/`

Published
May 1, 2022
Last Modified
April 4, 2025

🔗 CVE IDs covered (1)

CVE-2005-4875 →

📋 Description

TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables.

🎯 Affected products1

  • composer/typo3/cms:< 3.8.1

🔗 References (6)