high7.5
CVE-2014-6290
The News (tt_news) extension before 3.5.2 for TYPO3 allows remote attackers to have unspecified impact via vectors related to an "insecure unserialize" issue.
Impact
The News (tt_news) extension before 3.5.2 for TYPO3 allows remote attackers to have unspecified impact via vectors related to an "insecure unserialize" issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| News Project | News | through 3.5.1 Versions 3.0.0, 3.0.1, 3.1.0, 3.2.0, 3.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://typo3.org/extensions/repository/view/tt_news
- http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-003/
- http://typo3.org/extensions/repository/view/tt_news
- http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-003/