En resumen
- CVE-2014-8328 es una vulnerabilidad MEDIO (CVSS 5.3) que afecta a t3/dce, dynamic content elements (dynamic content elements project).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.6%, mayor que el 75.7% de las vulnerabilidades.
- Solución: actualizar a 0.11.5 o posterior.
| Package | Affected versions | Patched versions |
|---|
| t3/dce Packagist | < 0.11.5
| 0.11.5
|
| dynamic content elements | ≥ 0.10.0, ≤ 0.10.2≥ 0.11.0, < 0.11.5≥ 0.7.0, ≤ 0.7.5≥ 0.8.0, ≤ 0.8.6≥ 0.9.0, ≤ 0.9.4
| 0.11.5
|
Description
The default configuration in the Dynamic Content Elements (dce) extension before 0.11.5 for TYPO3 allows remote attackers to obtain sensitive installation environment information by reading the update check request.
NVD description
The default configuration in the Dynamic Content Elements (dce) extension before 0.11.5 for TYPO3 allows remote attackers to obtain sensitive installation environment information by reading the update check request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free