DescriptionThe Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, which allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters.
Overall state of this security issue: Resolved
This issue is currently rated as having moderate severity.
|National Vulnerability Database|
SUSE Security Advisories:
- openSUSE-SU-2016:2025-1, published Fri Dec 8 15:48:35 2023 openSUSE-SU-2016:2114-1 openSUSE-SU-2016:2169-1
SUSE Timeline for this CVECVE page created: Tue Dec 24 13:15:28 2013
CVE page last modified: Fri Dec 8 17:01:03 2023