CVE-2010-3714

🗓️ 25 Oct 2010 19:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov👁 84 Views🌐 WEB

CVE-2010-3714 jumpUrl implementation in tslib/class.tslib_fe.php in TYPO3 allows remote attackers to read arbitrary file

Reporter	Title	Published	Views	Family All 27
0day.today	TYPO3 Unauthenticated Arbitrary File Retrieval	30 Dec 201000:00	–	zdt
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality of protected information	7 Jul 201600:00	–	bdu_fstec
Circl	CVE-2010-3714	29 May 201815:50	–	circl
Cvelist	CVE-2010-3714	25 Oct 201019:00	–	cvelist
Debian	[SECURITY] [DSA 2121-1] New TYPO3 packages fix several vulnerabilities	19 Oct 201020:07	–	debian
Tenable Nessus	Debian DSA-2121-1 : typo3-src - several vulnerabilities	20 Oct 201000:00	–	nessus
Exploit DB	TYPO3 - Arbitrary File Retrieval	29 Dec 201000:00	–	exploitdb
exploitpack	TYPO3 - Arbitrary File Retrieval	29 Dec 201000:00	–	exploitpack
Github Security Blog	TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism	17 May 202205:28	–	github

NVD

Node

typo3 typo3Match4.2.0

typo3 typo3Match4.2.1

typo3 typo3Match4.2.2

typo3 typo3Match4.2.3

typo3 typo3Match4.2.4

typo3 typo3Match4.2.5

typo3 typo3Match4.2.6

typo3 typo3Match4.2.7

typo3 typo3Match4.2.8

typo3 typo3Match4.2.9

typo3 typo3Match4.2.10

typo3 typo3Match4.2.11

typo3 typo3Match4.2.12

typo3 typo3Match4.2.13

typo3 typo3Match4.2.14

typo3 typo3Match4.3.0

typo3 typo3Match4.3.1

typo3 typo3Match4.3.2

typo3 typo3Match4.3.3

typo3 typo3Match4.3.4

typo3 typo3Match4.3.5

typo3 typo3Match4.3.6

typo3 typo3Match4.4.1

typo3 typo3Match4.4.2

typo3 typo3Match4.4.3

Source	Link
debian	www.debian.org/security/2010/dsa-2121
typo3	www.typo3.org/teams/security/security-bulletins/typo3-sa-2010-020/
exploit-db	www.exploit-db.com/exploits/15856
securityfocus	www.securityfocus.com/bid/43786
blog	www.blog.nibblesec.org/2010/12/typo3-sa-2010-020-typo3-sa-2010-022.html

Parameter	Position	Path	Description	CWE
id	request body	index.php	TYPO3 jumpurl non-typesafe comparison flaw allows unauthenticated arbitrary file retrieval via POST to index.php with crafted fields	CWE-264
type	request body	index.php	TYPO3 jumpurl non-typesafe comparison flaw allows unauthenticated arbitrary file retrieval via POST to index.php with crafted fields	CWE-264
jumpurl	request body	index.php	TYPO3 jumpurl non-typesafe comparison flaw allows unauthenticated arbitrary file retrieval via POST to index.php with crafted fields	CWE-264
juSecure	request body	index.php	TYPO3 jumpurl non-typesafe comparison flaw allows unauthenticated arbitrary file retrieval via POST to index.php with crafted fields	CWE-264
locationData	request body	index.php	TYPO3 jumpurl non-typesafe comparison flaw allows unauthenticated arbitrary file retrieval via POST to index.php with crafted fields	CWE-264
juHash	request body	index.php	TYPO3 jumpurl non-typesafe comparison flaw allows unauthenticated arbitrary file retrieval via POST to index.php with crafted fields	CWE-264

16 Jun 2026 23:23Current

6.5Medium risk

Vulners AI Score6.5

CVSS 27.1

EPSS0.24558