CVE-2013-7073
Published: 23 December 2013
The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, which allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters.
Priority
Status
Package | Release | Status |
---|---|---|
typo3-src Launchpad, Ubuntu, Debian |
lucid |
Ignored
(end of life)
|
precise |
Ignored
(end of life)
|
|
quantal |
Ignored
(end of life)
|
|
raring |
Released
(4.5.19+dfsg1-5+wheezy2build0.13.04.1)
|
|
saucy |
Ignored
(end of life)
|
|
trusty |
Does not exist
(trusty was not-affected [4.5.32+dfsg1-1])
|
|
upstream |
Released
(4.5.32+dfsg1-1)
|
|
utopic |
Not vulnerable
(4.5.32+dfsg1-1)
|
|
vivid |
Not vulnerable
(4.5.32+dfsg1-1)
|
|
wily |
Does not exist
|
|
xenial |
Does not exist
|
|
yakkety |
Does not exist
|
|
zesty |
Does not exist
|