8 matches found
CVE-2021-36792
The datednews aka Dated News extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications...
CVE-2021-36789
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows SQL Injection...
CVE-2021-36791
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data...
CVE-2021-36791
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data...
CVE-2021-36790
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows XSS...
CVE-2021-36790
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows XSS...
CVE-2021-36791
The datednews aka Dated News extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data...
PT-2021-21360 · Typo3 · Dated News
Name of the Vulnerable Software and Affected Versions: dated news extension versions through 5.1.1 for TYPO3 Description: The issue concerns incorrect Access Control for confirming various applications. Recommendations: For dated news extension versions through 5.1.1, update to a version later th...