GHSA-66c2-7g4p-wx4p
GHSA-66c2-7g4p-wx4p · TYPO3 Information Disclosure in Install Tool
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Install Tool exposes the current TYPO3 version number to non-authenticated users.
CVSS 5.3 · Medium · Fix available
- Published
- Updated
Stack: php
Affected products and versions
typo3/cms-core Packagist
- Versions
- v8.7.10
- v8.7.11
- v8.7.12
- v8.7.13
- v8.7.14
- v8.7.15
- v8.7.16
- v8.7.17
- v8.7.18
- v8.7.19
- v8.7.20
- v8.7.7
- v8.7.8
- v8.7.9
- Affected ranges
- ECOSYSTEM: ≥ 8.0.0, < 8.7.21
Update to 8.7.21
typo3/cms-core Packagist
- Versions
- v9.0.0
- v9.1.0
- v9.2.0
- v9.2.1
- v9.3.0
- v9.3.1
- v9.3.2
- v9.3.3
- v9.4.0
- v9.5.0
- v9.5.1
- Affected ranges
- ECOSYSTEM: ≥ 9.0.0, < 9.5.2
Update to 9.5.2
typo3/cms-core Packagist
- Affected ranges
- ECOSYSTEM: ≥ 7.0.0, < 7.6.32
Update to 7.6.32