CVE-2014-3942 in TYPO3

الملخص

بحسب MITRE

The Color Picker Wizard component in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, and 6.1.0 before 6.1.9 allows remote authenticated editors to execute arbitrary PHP code via a serialized PHP object.

Be aware that VulDB is the high quality source for vulnerability data.

• حجز: 03/06/2014
• إفشاء: 03/06/2014
• الاعتدال: تمت الموافقة
• إدخال: 2
• ربط: عرض
• CPE: جاهز
• CWE: CWE-94 (مؤكد)
• CVSS: 6.0 (NVD)
• EPSS: 0.01634
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Hostingprovider, Agriculture, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-3942
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-3942
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-3942/