CVE-2013-7073 in TYPO3
Resumen (Inglés)
The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, which allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters.
Reservar
2013-12-11
Divulgación
2013-12-23
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 11481 | TYPO3 Content Editing Wizard escalada de privilegios | 264 | No está definido | Arreglo oficial | CVE-2013-7073 |