CVE-2014-9509

2022-10-0316:20:41

mitre

www.cve.org

typo3

frontend rendering

security issue

cache poisoning

remote attackers

resource consumption

url arguments

6.7 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.4%

JSON

The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set to all or cached, allows remote attackers to have an unspecified impact (possibly resource consumption) via a “Cache Poisoning” attack using a URL with arbitrary arguments, which triggers a reload of the page.