PT-2024-40285 · Typo3+1 · Typo3+1

Published 2024-06-05 · Updated 2024-06-05

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: TYPO3 (affected versions not specified)

Description: The issue concerns Remote Code Execution due to the use of the swiftmailer/swiftmailer package, which is known to be vulnerable.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

GHSA-G4PF-3JVQ-2GCW

Affected Products

Typo3

Swiftmailer

References · 4

• https://osv.dev/vulnerability/GHSA-g4pf-3jvq-2gcw · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2017-01-03-1.yaml · Note
• https://github.com/TYPO3/typo3 · Note
• https://typo3.org/security/advisory/typo3-core-sa-2017-001 · Note