PT-2024-40425 · Packagist · Typo3/Cms

Published 2024-06-05 · Updated 2024-06-05

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The element information component is susceptible to information disclosure due to improper permission checks on the list of references from or to a record. A valid backend user account is required to exploit this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-Q9C4-9V5M-597P

Affected Products

Typo3/Cms

References · 4

• https://osv.dev/vulnerability/GHSA-q9c4-9v5m-597p · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2019-06-25-1.yaml · Note
• https://github.com/TYPO3/typo3 · Note
• https://typo3.org/security/advisory/typo3-core-sa-2019-014 · Note