PT-2020-15898 · Typo3 · L10Nmgr

Dmitry Dulepov · Published 2020-09-02 · Updated 2021-07-26 · CVE-2020-25025

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions TYPO3 extension l10nmgr versions prior to 7.4.0 TYPO3 extension l10nmgr versions 8.x prior to 8.7.0 TYPO3 extension l10nmgr versions 9.x prior to 9.2.0

Description The issue allows information disclosure related to translatable fields.

Recommendations For versions prior to 7.4.0, update to version 7.4.0 or later. For versions 8.x prior to 8.7.0, update to version 8.7.0 or later. For versions 9.x prior to 9.2.0, update to version 9.2.0 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2020-25025

GHSA-CV9J-78F7-W6V9

Affected Products

L10Nmgr

References · 5

• https://typo3.org/help/security-advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25025 · Security Note
• https://osv.dev/vulnerability/CVE-2020-25025 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cv9j-78f7-w6v9 · Vendor Advisory
• https://typo3.org/security/advisory/typo3-ext-sa-2020-016 · Vendor Advisory