CVE-2013-7073
The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, which allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters.
| Software | From | Fixed in |
|---|---|---|
| typo3 / typo3 | 4.5.30 | 4.5.30.x |
| typo3 / typo3 | 4.5.3 | 4.5.3.x |
| typo3 / typo3 | 4.5.27 | 4.5.27.x |
| typo3 / typo3 | 4.5.9 | 4.5.9.x |
| typo3 / typo3 | 4.5.12 | 4.5.12.x |
| typo3 / typo3 | 4.5.24 | 4.5.24.x |
| typo3 / typo3 | 4.5.15 | 4.5.15.x |
| typo3 / typo3 | 4.5.5 | 4.5.5.x |
| typo3 / typo3 | 4.5.13 | 4.5.13.x |
| typo3 / typo3 | 4.5.17 | 4.5.17.x |
| typo3 / typo3 | 4.5.8 | 4.5.8.x |
| typo3 / typo3 | 4.5.14 | 4.5.14.x |
| typo3 / typo3 | 4.5.23 | 4.5.23.x |
| typo3 / typo3 | 4.5.7 | 4.5.7.x |
| typo3 / typo3 | 4.5.20 | 4.5.20.x |
| typo3 / typo3 | 4.5.6 | 4.5.6.x |
| typo3 / typo3 | 4.5.18 | 4.5.18.x |
| typo3 / typo3 | 4.5.0 | 4.5.0.x |
| typo3 / typo3 | 4.5.26 | 4.5.26.x |
| typo3 / typo3 | 4.5.29 | 4.5.29.x |
| typo3 / typo3 | 4.5.21 | 4.5.21.x |
| typo3 / typo3 | 4.5.31 | 4.5.31.x |
| typo3 / typo3 | 4.5.11 | 4.5.11.x |
| typo3 / typo3 | 4.5.19 | 4.5.19.x |
| typo3 / typo3 | 4.5.1 | 4.5.1.x |
| typo3 / typo3 | 4.5.16 | 4.5.16.x |
| typo3 / typo3 | 4.5.4 | 4.5.4.x |
| typo3 / typo3 | 4.5.25 | 4.5.25.x |
| typo3 / typo3 | 4.5.22 | 4.5.22.x |
| typo3 / typo3 | 4.5.2 | 4.5.2.x |
| typo3 / typo3 | 4.5.10 | 4.5.10.x |
| typo3 / typo3 | 4.5.28 | 4.5.28.x |
| typo3 / typo3 | 6.1.3 | 6.1.3.x |
| typo3 / typo3 | 6.1.6 | 6.1.6.x |
| typo3 / typo3 | 6.1.1 | 6.1.1.x |
| typo3 / typo3 | 6.1.5 | 6.1.5.x |
| typo3 / typo3 | 6.1.4 | 6.1.4.x |
| typo3 / typo3 | 6.1 | 6.1.x |
| typo3 / typo3 | 6.1.2 | 6.1.2.x |
| typo3 / typo3 | 6.0.11 | 6.0.11.x |
| typo3 / typo3 | 6.0.1 | 6.0.1.x |
| typo3 / typo3 | 6.0.10 | 6.0.10.x |
| typo3 / typo3 | 6.0.8 | 6.0.8.x |
| typo3 / typo3 | 6.0.3 | 6.0.3.x |
| typo3 / typo3 | 6.0.2 | 6.0.2.x |
| typo3 / typo3 | 6.0 | 6.0.x |
| typo3 / typo3 | 6.0.9 | 6.0.9.x |
| typo3 / typo3 | 6.0.6 | 6.0.6.x |
| typo3 / typo3 | 6.0.5 | 6.0.5.x |
| typo3 / typo3 | 6.0.7 | 6.0.7.x |
| typo3 / typo3 | 6.0.4 | 6.0.4.x |
| typo3 / typo3 | 4.7.5 | 4.7.5.x |
| typo3 / typo3 | 4.7.8 | 4.7.8.x |
| typo3 / typo3 | 4.7.1 | 4.7.1.x |
| typo3 / typo3 | 4.7.13 | 4.7.13.x |
| typo3 / typo3 | 4.7.2 | 4.7.2.x |
| typo3 / typo3 | 4.7.4 | 4.7.4.x |
| typo3 / typo3 | 4.7.12 | 4.7.12.x |
| typo3 / typo3 | 4.7.7 | 4.7.7.x |
| typo3 / typo3 | 4.7.10 | 4.7.10.x |
| typo3 / typo3 | 4.7.14 | 4.7.14.x |
| typo3 / typo3 | 4.7.11 | 4.7.11.x |
| typo3 / typo3 | 4.7.15 | 4.7.15.x |
| typo3 / typo3 | 4.7.6 | 4.7.6.x |
| typo3 / typo3 | 4.7.0 | 4.7.0.x |
| typo3 / typo3 | 4.7.3 | 4.7.3.x |
| typo3 / typo3 | 4.7.16 | 4.7.16.x |
| typo3 / typo3 | 4.7.9 | 4.7.9.x |
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00028.html
- http://lists.opensuse.org/opensuse-updates/2016-08/msg00083.html
- http://lists.opensuse.org/opensuse-updates/2016-08/msg00106.html
- http://seclists.org/oss-sec/2013/q4/473
- http://seclists.org/oss-sec/2013/q4/487
- http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/
- http://www.debian.org/security/2014/dsa-2834
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime