TYPO3 Content Editing Wizards Information Disclosure Vulnerability

Bugtraq ID:	64240
Class:	Unknown
CVE:	CVE-2013-7073
Remote:	Yes
Local:	No
Published:	Dec 10 2013 12:00AM
Updated:	Jan 02 2014 12:54AM
Credit:	Georg Ringer of TYPO3 Security Team.
Vulnerable:	Typo3 Typo3 4.5.13 Typo3 Typo3 4.5.3 Typo3 Typo3 4.5.2 Typo3 Typo3 4.5.15 Typo3 Typo3 4.5.1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

TYPO3 Content Editing Wizards Information Disclosure Vulnerability

TYPO3 is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information; this may aid in further attacks.

This issue is fixed in TYPO3 4.5.32, 4.7.17, 6.0.12 and 6.1.7

TYPO3 Content Editing Wizards Information Disclosure Vulnerability

An attacker can exploit this issue using a web browser.

TYPO3 Content Editing Wizards Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

TYPO3 Content Editing Wizards Information Disclosure Vulnerability

References:

• TYPO3 Homepage (TYPO3)