CVE-2011-4900: Typo3 Information Disclosure
Summary
CVE-2011-4900: Typo3 Information Disclosure. Affects typo3/cms versions < 4.5.4. Fixed in 4.5.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Typo3 is a content management system (CMS) that allows users to create and manage websites. It is widely used for its flexibility and extensibility. The Typo3 CMS package, available on Packagist, is a popular choice for developers looking to build dynamic and customizable websites. However, prior to version 4.5.4, Typo3 is vulnerable to an information disclosure issue in the backend.
Vulnerability Detail
The vulnerability in Typo3 before version 4.5.4 allows for information disclosure in the backend. This means that an attacker could gain access to sensitive information that should not be accessible to them. The impact of this vulnerability could vary depending on the specific information that is exposed. It is important to note that this vulnerability has a CVSS score of 6.5, indicating a moderate severity level.
How To Fix
Minimum fixed version
4.5.4
This is the first release that contains the fix.
composer require typo3/cms:4.5.4Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended solution is to update the Typo3 CMS package to the patched version.
Conclusion
In conclusion, the Typo3 CMS package prior to version 4.5.4 is vulnerable to an information disclosure issue in the backend. To mitigate this vulnerability, it is important to update the package to the patched version. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for typo3/cms →
FAQ
Typo3 is a popular content management system (CMS) used for creating and managing websites.
The vulnerability allows for information disclosure in the backend, potentially exposing sensitive information to unauthorized users.
To fix this vulnerability, update the Typo3 CMS package to version 4.5.4 or later.
There is no specific workaround mentioned for this vulnerability. Updating to the patched version is the recommended solution.
This vulnerability has a CVSS score of 6.5, indicating a moderate severity level.
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms.
