Lucene search

K
githubGitHub Advisory DatabaseGHSA-WR3C-6C22-M9V6
HistoryJun 05, 2024 - 5:28 p.m.

Privilege Escalation in TYPO3 Neos

2024-06-0517:28:04
GitHub Advisory Database
github.com
2
privilege escalation
typo3 neos
vulnerable
content nodes
logged in editors

7 High

AI Score

Confidence

High

It has been discovered that TYPO3 Neos is vulnerable to Privilege Escalation. Logged in editors could access, create and modify content nodes that exist in the workspace of other editors.

Affected configurations

Vulners
Node
typo3neosRange<1.2.3
OR
typo3neosRange<1.1.3
CPENameOperatorVersion
typo3/neoslt1.2.3
typo3/neoslt1.1.3

7 High

AI Score

Confidence

High