WS-2018-0063

Information Disclosure vulnerability in TYPO3 before 4.2.13 and 4.3.x before 4.3.2. When a sysaction task is set up for creation of new backend users, the executing unprivileged user can get hold of personal data except the password of any existing backend user. A valid backend login is required ...