Lucene search
OpenJS FoundationFRIENDSOFPHP:TYPO3:CMS-CORE:CVE-2022-23504HistoryDec 13, 2022 - 9:19 a.m.
TYPO3-CORE-SA-2022-016: Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
2022-12-1309:19:27
OpenJS Foundation
github.com
8
typo3
security advisory
information disclosure
yaml placeholder
site configuration
CVSS3
5.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
38.7%
Affected configurations
Node
typo3typo3_cmsRange<12.1.1
Related
openvas
openvas
prion
prion
Information disclosure
2022-12-14 08:15:00
nvd
nvd
CVE-2022-23504
2022-12-14 08:15:10
friendsofphp
friendsofphp
osv
osv
TYPO3 CMS vulnerable to Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
2022-12-13 17:13:37
BIT-typo3-2022-23504
2024-03-06 11:09:48
CVE-2022-23504
2022-12-14 08:15:10
github
github
veracode
veracode
Information Disclosure
2022-12-15 05:42:44
cvelist
cvelist
nessus
nessus
ubuntucve
ubuntucve
CVE-2022-23504
2022-12-14 00:00:00
cve
cve
CVE-2022-23504
2022-12-14 08:15:10
freebsd
freebsd
typo3 -- multiple vulnerabilities
2022-12-13 00:00:00
CVSS3
5.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
38.7%
Related for FRIENDSOFPHP:TYPO3:CMS-CORE:CVE-2022-23504