TYPO3 Information Disclosure in Install Tool

2024-06-0719:55:04

CWE-200

GitHub Advisory Database

github.com

typo3

install tool

information disclosure

non-authenticated users

software

7 High

AI Score

Confidence

Low

The Install Tool exposes the current TYPO3 version number to non-authenticated users.

Affected configurations

Vulners

Node

typo3cms_poll_system_extensionRange<9.5.2

typo3cms_poll_system_extensionRange<8.7.21

typo3cms_poll_system_extensionRange<7.6.32

CPENameOperatorVersion
typo3/cmslt9.5.2
typo3/cmslt8.7.21
typo3/cmslt7.6.32

Name	Operator	Version
typo3/cms	lt	9.5.2
typo3/cms	lt	8.7.21
typo3/cms	lt	7.6.32

github.com/advisories/GHSA-6487-3qvg-8px9

github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-12-11-5.yaml

github.com/TYPO3/typo3/commit/232d0a64282382229c205904173a16a581555fe3

github.com/TYPO3/typo3/commit/b4dd20f31d483f6399e8bcbffcac3e16a2df0d92

github.com/TYPO3/typo3/commit/fab0cbc970b709ed65fc4622a2cbd52a197480c4

typo3.org/security/advisory/typo3-core-sa-2018-010

7 High

AI Score

Confidence

Low