Lucene search
+L

6 matches found

OSV
OSV
•added 2024/03/06 11:10 a.m.•28 views

BIT-TYPO3-2022-23500

TYPO3 is an open source PHP based web content management system. In versions prior to 9.5.38, 10.4.33, 11.5.20, and 12.1.1, requesting invalid or non-existing resources via HTTP triggers the page error handler, which again could retrieve content to be shown as an error message from another page...

7.5CVSS6.3AI score0.00704EPSS
SaveExploits0References1
NVD
NVD
•added 2022/12/14 8:15 a.m.•30 views

CVE-2022-23500

TYPO3 is an open source PHP based web content management system. In versions prior to 9.5.38, 10.4.33, 11.5.20, and 12.1.1, requesting invalid or non-existing resources via HTTP triggers the page error handler, which again could retrieve content to be shown as an error message from another page...

7.5CVSS0.00704EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2022/12/13 12:00 a.m.•49 views

TYPO3 9.0.0 < 9.5.38 ELTS / 10.0.0 < 10.4.33 / 11.0.0 < 11.5.20 (TYPO3-CORE-SA-2022-012)

The version of TYPO3 installed on the remote host is prior to 9.0.0 9.5.38 ELTS / 10.0.0 10.4.33 / 11.0.0 11.5.20. It is, therefore, affected by a vulnerability as referenced in the TYPO3-CORE-SA-2022-012 advisory. - Requesting invalid or non-existing resources via HTTP triggers the page error...

7.5CVSS7.1AI score0.01731EPSS
SaveExploits0References2
OSV
OSV
•added 2021/03/23 1:54 a.m.•31 views

GHSA-4P9G-QGX9-397P Denial of Service in Page Error Handling

Meta CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:C 5.5 CWE-405, CWE-674 Status: DRAFT Problem Requesting invalid or non-existing resources via HTTP triggers the page error handler which again could retrieve content to be shown as error message from another page. This leads to a...

5.9CVSS6.4AI score0.01731EPSS
SaveExploits0References6
Typo3
Typo3
•added 2021/03/16 12:00 a.m.•104 views

Denial of Service in Page Error Handling

Requesting invalid or non-existing resources via HTTP triggers the page error handler which again could retrieve content to be shown as an error message from another page. This leads to a scenario in which the application is calling itself recursively - amplifying the impact of the initial attack...

5CVSS2.1AI score0.01731EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/02/25 12:00 a.m.•6 views

CVE-2008-0979: Undefined Security Weakness

Stack consumption vulnerability in Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service daemon crash via a certain packet that triggers the recursive calling of a function...

5CVSS5.9AI score0.02625EPSS
SaveExploits0References2
Rows per page
Query Builder