Upstream information

CVE-2014-3941 at MITRE

Description

TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allows remote attackers to have unspecified impact via a crafted HTTP Host header, related to "Host Spoofing."

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having moderate severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 5
Vector AV:N/AC:L/Au:N/C:N/I:P/A:N
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact None
Integrity Impact Partial
Availability Impact None
SUSE Bugzilla entries: 1082714 [RESOLVED / FIXED], 881282 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
openSUSE 13.1
  • typo3-cms-4_5 >= 4.5.40-2.7.1
  • typo3-cms-4_7 >= 4.7.20-3.3.1
Patchnames:
2016-959
openSUSE-2014-429
openSUSE Leap 42.1
  • typo3-cms-4_7 >= 4.7.20-7.1
Patchnames:
openSUSE-2016-1002