GHSA-p65f-652v-35r2

Source

https://github.com/advisories/GHSA-p65f-652v-35r2

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-p65f-652v-35r2/GHSA-p65f-652v-35r2.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-p65f-652v-35r2

Aliases

CVE-2009-4160

Published

2022-05-02T03:52:20Z

Modified

2025-04-10T12:42:12.771766Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure

Details

Unspecified vulnerability in the Simple download-system with counter and categories (kk_downloader) extension 1.2.1 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors.

Database specific

{
    "github_reviewed": true,
    "github_reviewed_at": "2025-04-10T12:22:32Z",
    "nvd_published_at": "2009-12-02T17:30:00Z",
    "severity": "MODERATE",
    "cwe_ids": [
        "CWE-200"
    ]
}

References

Affected packages

Packagist / jweiland/kk-downloader

Package

Name: jweiland/kk-downloader
Purl: pkg:composer/jweiland/kk-downloader

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-p65f-652v-35r2/GHSA-p65f-652v-35r2.json"