Upstream information
Description
TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allows remote attackers to have unspecified impact via a crafted HTTP Host header, related to "Host Spoofing."SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having moderate severity.
National Vulnerability Database | |
---|---|
Base Score | 5 |
Vector | AV:N/AC:L/Au:N/C:N/I:P/A:N |
Access Vector | Network |
Access Complexity | Low |
Authentication | None |
Confidentiality Impact | None |
Integrity Impact | Partial |
Availability Impact | None |
SUSE Security Advisories:
- openSUSE-SU-2014:0813-1, published Wed, 18 Jun 2014 12:04:12 +0200 (CEST)
- openSUSE-SU-2016:2025-1, published Wed, 10 Aug 2016 22:09:17 +0200 (CEST)
- openSUSE-SU-2016:2114-1, published Fri, 19 Aug 2016 19:09:32 +0200 (CEST)
SUSE Timeline for this CVE
CVE page created: Tue Jun 3 19:49:40 2014CVE page last modified: Fri Oct 7 12:46:49 2022