CVE-2014-3946 in TYPO3
Summary
The query caching functionality in the Extbase Framework component in TYPO3 6.2.0 before 6.2.3 does not properly validate group permissions, which allows remote authenticated users to read arbitrary queries via unspecified vectors.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
06/03/2014
Disclosure
06/03/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13347 | TYPO3 Extbase information disclosure | 200 | Not defined | Official fix | CVE-2014-3946 |