CVE-2022-24979

An issue was discovered in the Varnishcache extension before 2.0.1 for TYPO3. The Edge Site Includes ESI content element renderer component does not include an access check. This allows an unauthenticated user to render various content elements, resulting in insecure direct object reference IDOR,...

Varnishcache信息泄露漏洞

Varnishcache is a high performance HTTP gas pedal. An information disclosure vulnerability exists in Varnishcache, which arises from an object not being securely referenced by the content element renderer component included in the product edge site. A remote attacker could expose internal content...