p PatchFirst

GHSA-rv8r-8mh5-5376

GHSA-rv8r-8mh5-5376 · TYPO3 Information Disclosure in Backend User Interface

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The element information component used to display properties of a certain record is susceptible to information disclosure. The list of references from or to the record is not properly checked for the backend user’s permissions. A valid backend user account is needed in order to exploit this vulnerability.

CVSS 5.4 · Medium · Fix available

Published
Updated

Stack: php

Affected products and versions

  • typo3/cms-core Packagist

    Versions
    • v8.7.10
    • v8.7.11
    • v8.7.12
    • v8.7.13
    • v8.7.14
    • v8.7.15
    • v8.7.16
    • v8.7.17
    • v8.7.18
    • v8.7.19
    • v8.7.20
    • v8.7.21
    • v8.7.22
    • v8.7.23
    • v8.7.24
    • v8.7.25
    • v8.7.26
    • v8.7.7
    • v8.7.8
    • v8.7.9
    Affected ranges
    • ECOSYSTEM: ≥ 8.0.0, < 8.7.27

    Update to 8.7.27

  • typo3/cms-core Packagist

    Versions
    • v9.0.0
    • v9.1.0
    • v9.2.0
    • v9.2.1
    • v9.3.0
    • v9.3.1
    • v9.3.2
    • v9.3.3
    • v9.4.0
    • v9.5.0
    • v9.5.1
    • v9.5.2
    • v9.5.3
    • v9.5.4
    • v9.5.5
    • v9.5.6
    • v9.5.7
    Affected ranges
    • ECOSYSTEM: ≥ 9.0.0, < 9.5.8

    Update to 9.5.8

Original sources

Check your server →