Lucene search

K
osvGoogleOSV:GHSA-JXG5-35FJ-CCWF
HistoryMay 17, 2022 - 3:02 a.m.

Extbase for TYPO3 allows RCE

2022-05-1703:02:43
Google
osv.dev
6

0.034 Low

EPSS

Percentile

91.5%

Extbase in TYPO3 4.3.0 before 6.2.24, 7.x before 7.6.8, and 8.1.1 allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted Extbase action.

CPENameOperatorVersion
typo3/cms-extbaseeq8.1.1

0.034 Low

EPSS

Percentile

91.5%