GHSA-RF5M-H8Q9-9W6Q Information Disclosure in TYPO3 Page Tree

🗓️ 08 Oct 2024 14:37:08Reported by GoogleType

osv🔗 osv.dev👁 10 Views

Information Disclosure in TYPO3 Page Tree. Backend users could see items in the backend page tree without having access to restricted pages. Update to TYPO3 versions 10.4.46 ELTS, 11.5.40 LTS, 12.4.21 LTS, 13.3.1

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2024-47780	8 Oct 202421:14	–	circl
CNNVD	TYPO3 安全漏洞	8 Oct 202400:00	–	cnnvd
CVE	CVE-2024-47780	8 Oct 202417:57	–	cve
Cvelist	CVE-2024-47780 Information Disclosure in TYPO3 Page Tree	8 Oct 202417:57	–	cvelist
EUVD	EUVD-2024-3132	3 Oct 202520:07	–	euvd
Github Security Blog	Information Disclosure in TYPO3 Page Tree	8 Oct 202414:37	–	github
NVD	CVE-2024-47780	8 Oct 202418:15	–	nvd
OSV	CVE-2024-47780 Information Disclosure in TYPO3 Page Tree	8 Oct 202417:57	–	osv
RedhatCVE	CVE-2024-47780	23 May 202508:59	–	redhatcve
Snyk	Incorrect Authorization	8 Oct 202418:43	–	snyk

Source	Link
github	www.github.com/TYPO3/typo3/security/advisories/GHSA-rf5m-h8q9-9w6q
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-47780
github	www.github.com/TYPO3-CMS/backend/commit/8b024b08a2c7071a2f2ff7c758766e4e9273f83c
github	www.github.com/TYPO3-CMS/backend/commit/9ae1ef969b63292a13f80955a95713cabd45cc22
github	www.github.com/TYPO3-CMS/backend/commit/a7b3c924014ada61632cd5e3fb9825fcc86c5719
github	www.github.com/TYPO3-CMS/backend
typo3	www.typo3.org/security/advisory/typo3-core-sa-2024-012

09 Oct 2024 16:37Current

3.8Low risk

Vulners AI Score3.8

CVSS 42.3

CVSS 3.13.1

EPSS0.00302

information disclosure typo3 page tree update 10.4.46 elts 11.5.40 lts 12.4.21 lts 13.3.1 backend users restricted pages security issue peter schuler oliver hader typo3 core team