PT-2024-40059 · Typo3 · Typo3 Neos

Published 2024-05-17 · Updated 2024-05-17

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions TYPO3 Neos (affected versions not specified)

Description A privilege escalation issue has been discovered, allowing logged-in editors to access, create, and modify content nodes that exist in the workspace of other editors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-43CF-7F3H-38RG

Affected Products

Typo3 Neos

References · 4

• https://osv.dev/vulnerability/GHSA-43cf-7f3h-38rg · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/neos/neos/2015-03-28.yaml · Note
• https://github.com/neos/neos · Note
• https://neos.io/blog/neos-sa-2015-001.html · Note