TYPO3 Information Disclosure in Install Tool

2024-05-3015:13:09

CWE-200

GitHub Advisory Database

github.com

typo3

install tool

information disclosure

non-authenticated users

security

7 High

AI Score

Confidence

Low

The Install Tool exposes the current TYPO3 version number to non-authenticated users.

Affected configurations

Vulners

Node

typo3cms_poll_system_extensionRange<7.6.32

typo3cms_poll_system_extensionRange<9.5.2

typo3cms_poll_system_extensionRange<8.7.21

CPENameOperatorVersion
typo3/cms-corelt7.6.32
typo3/cms-corelt9.5.2
typo3/cms-corelt8.7.21

Name	Operator	Version
typo3/cms-core	lt	7.6.32
typo3/cms-core	lt	9.5.2
typo3/cms-core	lt	8.7.21

github.com/advisories/GHSA-66c2-7g4p-wx4p

github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-5.yaml

typo3.org/security/advisory/typo3-core-sa-2018-010

7 High

AI Score

Confidence

Low