Vulnerability advisory
GHSA-r674-mc9p-hvw5
TYPO3 Improper Access Control vulnerability
Also known as CVE-2013-7081
Severity
Severity not reported.
Affected versions
| Affected | Fixed in |
|---|---|
4.5.0 to before 4.5.31 | 4.5.31Advisories → |
4.7.0 to before 4.7.16 | 4.7.16Advisories → |
6.0.0 to before 6.0.11 | 6.0.11Advisories → |
6.1.0 to before 6.1.6 | 6.1.6Advisories → |
Description
The (old) Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary HMAC signatures and bypass intended access restrictions via unspecified vectors.