CVE-2014-3941

Upstream information

CVE-2014-3941 at MITRE

Description

TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allows remote attackers to have unspecified impact via a crafted HTTP Host header, related to "Host Spoofing."

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores

CVSS detail	National Vulnerability Database
Base Score	5
Vector	AV:N/AC:L/Au:N/C:N/I:P/A:N
Access Vector	Network
Access Complexity	Low
Authentication	None
Confidentiality Impact	None
Integrity Impact	Partial
Availability Impact	None

SUSE Bugzilla entries: 1082714 [RESOLVED / FIXED], 881282 [RESOLVED / FIXED]

SUSE Security Advisories:

openSUSE-SU-2014:0813-1
• openSUSE-SU-2016:2025-1, published Fri Dec 8 15:48:35 2023
openSUSE-SU-2016:2114-1

---

SUSE Timeline for this CVE

CVE page created: Tue Jun 3 19:49:40 2014
CVE page last modified: Mon Oct 6 18:20:59 2025