PT-2024-40508 · Typo3 · Typo3 Neos

Published 2024-06-05 · Updated 2024-06-05

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions TYPO3 Neos (affected versions not specified)

Description A privilege escalation issue has been discovered, allowing logged-in editors to access, create, and modify content nodes that exist in the workspace of other editors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-WR3C-6C22-M9V6

Affected Products

Typo3 Neos

References · 3

• https://osv.dev/vulnerability/GHSA-wr3c-6c22-m9v6 · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/neos/2015-03-28.yaml · Note
• https://neos.io/blog/neos-sa-2015-001.html · Note