Lucene search
TYPO3 AssociationTYPO3-CORE-SA-2020-008HistoryJul 28, 2020 - 12:00 a.m.
Sensitive Information Disclosure
2020-07-2800:00:00
TYPO3 Association
typo3.org
15
0.034 Low
EPSS
Percentile
91.5%
It has been discovered that an internal verification mechanism can be used to generate arbitrary checksums. This allows to inject arbitrary data having a valid cryptographic message authentication code (HMAC-SHA1) and can lead to various attack chains as described below.
Related
osv
osv
Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS
2020-07-29 16:15:19
Potential Remote Code Execution in TYPO3 with mediace extension
2020-07-29 16:15:12
Exposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMS
2020-07-29 16:15:32
github
github
Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS
2020-07-29 16:15:19
Potential Remote Code Execution in TYPO3 with mediace extension
2020-07-29 16:15:12
Exposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMS
2020-07-29 16:15:32
nessus
nessus
openvas
openvas
freebsd
freebsd
typo3 -- multiple vulnerabilities
2020-07-28 00:00:00
typo3 -- Missing access check in Extbase
2016-05-24 00:00:00
typo3
typo3
Critical vulnerability in legacy versions of TYPO3 CMS
2020-07-28 00:00:00
Missing Access Check in TYPO3 CMS
2016-05-24 00:00:00
prion
prion
Remote code execution
2020-07-29 17:15:00
Deserialization of untrusted data
2017-01-23 21:59:00
Deserialization of untrusted data
2020-07-29 17:15:00
cve
cve
ubuntucve
ubuntucve
friendsofphp
friendsofphp
TYPO3-CORE-SA-2020-007: Potential Privilege Escalation
2020-07-28 08:18:30
TYPO3-CORE-SA-2020-008: Sensitive Information Disclosure
2020-07-28 08:18:38
TYPO3-CORE-SA-2020-008: Sensitive Information Disclosure
2020-07-28 08:18:38
nvd
nvd
cvelist
cvelist
CVE-2016-5091
2017-01-23 21:00:00
veracode
veracode
Insecure Cryptography
2020-07-30 02:33:31
Information Disclosure
2020-08-03 06:29:59