CVE-2021-36792

The datednews aka Dated News extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications...

CVE-2021-36789

The datednews aka Dated News extension through 5.1.1 for TYPO3 allows SQL Injection...

CVE-2021-36790

The datednews aka Dated News extension through 5.1.1 for TYPO3 allows XSS...

CVE-2021-36791

The datednews aka Dated News extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data...

CVE-2021-36791

The datednews aka Dated News extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data...

PT-2021-21360 · Typo3 · Dated News

Name of the Vulnerable Software and Affected Versions: dated news extension versions through 5.1.1 for TYPO3 Description: The issue concerns incorrect Access Control for confirming various applications. Recommendations: For dated news extension versions through 5.1.1, update to a version later th...