TYPO3 (Old) Form Content Element Information Disclosure Vulnerability
BID:64238
Info
TYPO3 (Old) Form Content Element Information Disclosure Vulnerability
| Bugtraq ID: | 64238 |
| Class: | Unknown |
| CVE: |
CVE-2013-7081 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 10 2013 12:00AM |
| Updated: | Jan 02 2014 01:03AM |
| Credit: | Franz Jahn, TYPO3 Security Team |
| Vulnerable: |
Typo3 Typo3 4.5.13 Typo3 Typo3 4.5.8 Typo3 Typo3 4.5.7 Typo3 Typo3 4.5.5 Typo3 Typo3 4.5.9 Typo3 Typo3 4.5.6 Typo3 Typo3 4.5.4 Typo3 Typo3 4.5.3 Typo3 Typo3 4.5.2 Typo3 Typo3 4.5.15 Typo3 Typo3 4.5.1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
TYPO3 (Old) Form Content Element Information Disclosure Vulnerability
TYPO3 is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information; this may aid in further attacks.
This issue is fixed in TYPO3 4.5.32, 4.7.17, 6.0.12 and 6.1.7
TYPO3 is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information; this may aid in further attacks.
This issue is fixed in TYPO3 4.5.32, 4.7.17, 6.0.12 and 6.1.7
Exploit / POC
TYPO3 (Old) Form Content Element Information Disclosure Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
TYPO3 (Old) Form Content Element Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
TYPO3 (Old) Form Content Element Information Disclosure Vulnerability
References:
References:
- TYPO3 Homepage (TYPO3)