p PatchFirst

GHSA-4r76-xr68-w7m7

GHSA-4r76-xr68-w7m7 · TYPO3 may allow editors to change, create, or delete metadata of files not within their file mounts

This page contains facts from public vulnerability sources. Check the original advisory before updating.

It has been discovered, that editors with access to file meta data table could change, create or delete metadata of files which are not within their file mounts.

CVSS 8.8 · High · Fix available

Published
Updated

Stack: php

Affected products and versions

  • typo3/cms Packagist

    Versions
    • 6.2.0
    • 6.2.1
    • 6.2.10
    • 6.2.10-rc1
    • 6.2.11
    • 6.2.12
    • 6.2.13
    • 6.2.2
    • 6.2.3
    • 6.2.4
    • 6.2.5
    • 6.2.6
    • 6.2.7
    • 6.2.8
    • 6.2.9
    Affected ranges
    • ECOSYSTEM: ≥ 6.2.0, < 6.2.14

    Update to 6.2.14

  • typo3/cms Packagist

    Versions
    • 7.0.0
    • 7.0.1
    • 7.0.2
    • 7.1.0
    • 7.2.0
    • 7.3.0
    Affected ranges
    • ECOSYSTEM: ≥ 7.0.0, < 7.3.1

    Update to 7.3.1

Original sources

Check your server →