Lucene search
TYPO3 AssociationTYPO3-EXT-SA-2020-010HistoryJul 07, 2020 - 12:00 a.m.
Broken Access Control in extension "typo3_forum" (typo3_forum)
2020-07-0700:00:00
TYPO3 Association
typo3.org
7
0.001 Low
EPSS
Percentile
30.9%
The ACL check of the extension is broken under certain conditions allowing anonymous users to create forum posts although this feature is disabled for anonymous users in the access control list.
| CPE | Name | Operator | Version |
|---|---|---|---|
| typo3_forum | le | 1.2.0 |
Related
veracode
veracode
Authorization Bypass
2020-08-03 06:12:21
github
github
Incorrect access control in typo3_forum
2020-07-29 18:07:38
cve
cve
CVE-2020-15513
2020-07-07 14:15:11
osv
osv
Incorrect access control in typo3_forum
2020-07-29 18:07:38
CVE-2020-15513
2020-07-07 14:15:11
prion
prion
Improper access control
2020-07-07 14:15:00
nvd
nvd
CVE-2020-15513
2020-07-07 14:15:11
cvelist
cvelist
CVE-2020-15513
2020-07-07 13:50:17