GHSA-8grp-3j5v-543g

Suggest an improvement
Source
https://github.com/advisories/GHSA-8grp-3j5v-543g
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/04/GHSA-8grp-3j5v-543g/GHSA-8grp-3j5v-543g.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-8grp-3j5v-543g
Aliases
  • CVE-2011-4901
Published
2022-04-22T00:24:10Z
Modified
2024-01-12T20:56:35.022189Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
Typo3 Arbitrary Information Disclosure
Details

TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to extract arbitrary information from the TYPO3 database.

Database specific
{
    "nvd_published_at": "2019-11-06T17:15:00Z",
    "cwe_ids": [
        "CWE-200"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2024-01-12T20:41:55Z"
}
References

Affected packages

Packagist / typo3/cms

Package

Name
typo3/cms
Purl
pkg:composer/typo3/cms

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3.12

Packagist / typo3/cms

Package

Name
typo3/cms
Purl
pkg:composer/typo3/cms

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.4.0
Fixed
4.4.9

Packagist / typo3/cms

Package

Name
typo3/cms
Purl
pkg:composer/typo3/cms

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.5.0
Fixed
4.5.4