Description
TYPO3 before 4.5.4 allows Information Disclosure in the backend.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_misc
https://security-tracker.debian.org/tracker/CVE-2011-4900
Vendor Advisory x_refsource_confirm
https://typo3.org/security/advisory/typo3-core-sa-2011-001/#Information_Disclosure
Scores
CVSS v3
6.5
EPSS
0.0032
EPSS Percentile
55.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (4)
debian/debian_linux
5.0
debian/debian_linux
6.0
typo3/cms
0 - 4.5.4Packagist
typo3/typo3
4.5.0 - 4.5.4
Published
Nov 06, 2019
Tracked Since
Feb 18, 2026