CVE Vulnerabilities

CVE-2013-7081

Published: Dec 23, 2013 | Modified: Jan 14, 2014
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.9 MEDIUM
AV:N/AC:M/Au:S/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The (old) Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary HMAC signatures and bypass intended access restrictions via unspecified vectors.

Affected Software

Name Vendor Start Version End Version
Typo3 Typo3 6.0 (including) 6.0 (including)
Typo3 Typo3 6.0.1 (including) 6.0.1 (including)
Typo3 Typo3 6.0.2 (including) 6.0.2 (including)
Typo3 Typo3 6.0.3 (including) 6.0.3 (including)
Typo3 Typo3 6.0.4 (including) 6.0.4 (including)
Typo3 Typo3 6.0.5 (including) 6.0.5 (including)
Typo3 Typo3 6.0.6 (including) 6.0.6 (including)
Typo3 Typo3 6.0.7 (including) 6.0.7 (including)
Typo3 Typo3 6.0.8 (including) 6.0.8 (including)
Typo3 Typo3 6.0.9 (including) 6.0.9 (including)
Typo3 Typo3 6.0.10 (including) 6.0.10 (including)
Typo3 Typo3 6.0.11 (including) 6.0.11 (including)

References