Design/Logic Flaw

2019-11-0423:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.8%

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secure download feature jumpurl.

CPENameOperatorVersion
typo3ge4.4.0
typo3lt4.4.1
typo3ge4.3.0
typo3lt4.3.4
typo3lt4.1.14
typo3ge4.2.0
typo3lt4.2.13

Name	Operator	Version
typo3	ge	4.4.0
typo3	lt	4.4.1
typo3	ge	4.3.0
typo3	lt	4.3.4
typo3	lt	4.1.14
typo3	ge	4.2.0
typo3	lt	4.2.13

References

bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719

security-tracker.debian.org/tracker/CVE-2010-3668

typo3.org/security/advisory/typo3-sa-2010-012/