Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47350
HistoryJun 04, 2024 - 9:32 a.m.

Information Disclosure

2024-06-0409:32:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
information disclosure
inline javascript settings
requirejs package
installed system
third-party extensions
vulnerability

AI Score

6.6

Confidence

Low

typo3/cms-core is vulnerable to Information Disclosure. The vulnerability is due to Inline JavaScript settings within the RequireJS package, which allows an attacker to retrieve additional information about the installed system and third-party extensions.

AI Score

6.6

Confidence

Low