high8.1
CVE-2016-5091
Extbase in TYPO3 4.3.0 before 6.2.24, 7.x before 7.6.8, and 8.1.1 allows remote attackers to obtain sensitive information or possibly execute arbitrary code vi…
Impact
Extbase in TYPO3 4.3.0 before 6.2.24, 7.x before 7.6.8, and 8.1.1 allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted Extbase action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Typo3 | Typo3 | through 6.2.23 Versions 7.0.0, 7.0.2, 7.1.0, 7.2.0, 7.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2016/05/25/4
- http://www.openwall.com/lists/oss-security/2016/05/26/2
- https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-013/
- http://www.openwall.com/lists/oss-security/2016/05/25/4
- http://www.openwall.com/lists/oss-security/2016/05/26/2
- https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-013/