p PatchFirst

GHSA-h934-f4m4-wc8x

GHSA-h934-f4m4-wc8x · Typo3 Information Disclosure in Page Tree

This page contains facts from public vulnerability sources. Check the original advisory before updating.

It has been discovered backend users not having read access to specific pages still could see them in the page tree which actually should be disallowed. A valid backend user account is needed in order to exploit this vulnerability.

Fix available

Published
Updated

Stack: php

Affected products and versions

  • typo3/cms Packagist

    Versions
    • v9.0.0
    • v9.1.0
    • v9.2.0
    • v9.2.1
    • v9.3.0
    • v9.3.1
    • v9.3.2
    • v9.3.3
    • v9.4.0
    • v9.5.0
    • v9.5.1
    • v9.5.2
    • v9.5.3
    • v9.5.4
    • v9.5.5
    Affected ranges
    • ECOSYSTEM: ≥ 9.0.0, < 9.5.6

    Update to 9.5.6

Original sources

Check your server →