Vulnerability Database

296,172

Total vulnerabilities in the database

Privilege Escalation in TYPO3 CMS

The workspace/ version preview link created by a privileged (backend) user could be abused to obtain certain editing permission, if the admin panel is configured to be shown. A valid preview link is required to exploit this vulnerability.

CVSS v3:

  • Severity: Unknown
  • Score:
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWEs:

Software From Fixed in
Composer icon typo3 / cms 6.2.0 6.2.20
Composer icon typo3 / cms 7.6.0 7.6.5
Composer icon typo3 / cms 8.0.0 8.0.1