high7.5
CVE-2010-3668
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secure download feature jumpurl.
Impact
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secure download feature jumpurl.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Typo3 | Typo3 | before 4.1.14 from 4.2.0 before 4.2.13 from 4.3.0 before 4.3.4 from 4.4.0 before 4.4.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719
- https://security-tracker.debian.org/tracker/CVE-2010-3668
- https://typo3.org/security/advisory/typo3-sa-2010-012/#Header_Injection
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719
- https://security-tracker.debian.org/tracker/CVE-2010-3668
- https://typo3.org/security/advisory/typo3-sa-2010-012/#Header_Injection