CVE-2013-7075
CVE-2013-7075
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated backend users to unserialize arbitrary PHP objects, delete arbitrary files, and possibly have other unspecified impacts via an unspecified parameter, related to a "missing signature."
CVSS 6.3 · Medium · EPSS 1.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
typo3/cms Packagist
- Affected ranges
- ECOSYSTEM: ≥ 4.5.0, < 4.5.32
Update to 4.5.32
typo3/cms Packagist
- Affected ranges
- ECOSYSTEM: ≥ 4.7.0, < 4.7.17
Update to 4.7.17
typo3/cms Packagist
- Affected ranges
- ECOSYSTEM: ≥ 6.0.0, < 6.0.12
Update to 6.0.12
typo3/cms Packagist
- Affected ranges
- ECOSYSTEM: ≥ 6.1.0, < 6.1.7
Update to 6.1.7