GHSA-jxg5-35fj-ccwfHighCVSS 8.1

Extbase for TYPO3 allows RCE

Published
May 17, 2022
Last Modified
July 31, 2023

🔗 CVE IDs covered (1)

CVE-2016-5091 →

📋 Description

Extbase in TYPO3 4.3.0 before 6.2.24, 7.x before 7.6.8, and 8.1.1 allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted Extbase action.

🎯 Affected products3

  • composer/typo3/cms-extbase:< 6.2.24
  • composer/typo3/cms-extbase:>= 7.0, < 7.6.8
  • composer/typo3/cms-extbase:= 8.1.1

🔗 References (5)