Lucene search
K

4 matches found

NVD
NVD
added 2022/02/19 4:15 a.m.11 views

CVE-2022-24979

An issue was discovered in the Varnishcache extension before 2.0.1 for TYPO3. The Edge Site Includes ESI content element renderer component does not include an access check. This allows an unauthenticated user to render various content elements, resulting in insecure direct object reference IDOR,...

5.3CVSS0.00226EPSS
Exploits0References2
OSV
OSV
added 2022/02/19 4:15 a.m.3 views

CVE-2022-24979

An issue was discovered in the Varnishcache extension before 2.0.1 for TYPO3. The Edge Site Includes ESI content element renderer component does not include an access check. This allows an unauthenticated user to render various content elements, resulting in insecure direct object reference IDOR,...

5.3CVSS5.8AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/19 4:15 a.m.3 views

CVE-2022-24979

An issue was discovered in the Varnishcache extension before 2.0.1 for TYPO3. The Edge Site Includes ESI content element renderer component does not include an access check. This allows an unauthenticated user to render various content elements, resulting in insecure direct object reference IDOR,...

5.3CVSS5.8AI score0.00226EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/02/15 12:0 a.m.3 views

Varnishcache信息泄露漏洞

Varnishcache is a high performance HTTP gas pedal. An information disclosure vulnerability exists in Varnishcache, which arises from an object not being securely referenced by the content element renderer component included in the product edge site. A remote attacker could expose internal content...

5.3CVSS5.8AI score0.00226EPSS
Exploits0References5
Rows per page
Query Builder