Lucene search

K
freebsdFreeBSD1AD3D264-E36B-11EE-9C27-40B034429ECF
HistoryFeb 13, 2024 - 12:00 a.m.

typo3-{11,12} -- multiple vulnerabilities

2024-02-1300:00:00
vuxml.freebsd.org
14
typo3
security releases
path traversal
code execution
information disclosure
improper access control
file abstraction layer
cve-2023-30451
cve-2024-22188
cve-2024-25118
cve-2024-25119
cve-2024-25120
cve-2024-25121
unix

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

19.8%

Typo3 developers reports:

All versions are security releases and contain important security fixes - read the corresponding security advisories here:

Path Traversal in TYPO3 File Abstraction Layer Storages CVE-2023-30451
Code Execution in TYPO3 Install Tool CVE-2024-22188
Information Disclosure of Hashed Passwords in TYPO3 Backend Forms CVE-2024-25118
Information Disclosure of Encryption Key in TYPO3 Install Tool CVE-2024-25119
Improper Access Control of Resources Referenced by t3:// URI Scheme CVE-2024-25120
Improper Access Control Persisting File Abstraction Layer Entities via Data Handler CVE-2024-25121

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchtypo3-11< 11.5.35UNKNOWN
FreeBSDanynoarchtypo3-12< 12.4.11UNKNOWN

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

19.8%