Information Disclosure in Backend User Interface

More info at https://typo3.org/security/advisory/typo3-core-sa-2019-014...

Information Disclosure in Backend User Interface

More info at https://typo3.org/security/advisory/typo3-core-sa-2019-014...

Information Disclosure in Backend User Interface

The element information component used to display properties of a certain record is susceptible to information disclosure. The list of references from or to the record is not properly checked for the backend user’s permissions. A valid backend user account is needed in order to exploit this...

typo3 -- cross-site scripting and information disclosure

Secunia reports: Some vulnerabilities have been reported in Typo3, which can be exploited by malicious people to conduct cross-site scripting attacks and disclose sensitive information. Input passed via unspecified fields to the backend user interface is not properly sanitised before being return...