| Package | Affected versions | Patched versions |
|---|---|---|
| typo3/cms | ≥ 8.0.0, < 8.7.23≥ 9.0.0, < 9.5.4 | 8.7.239.5.4 |
It has been discovered that mechanisms used for configuration of RequireJS package loading are susceptible to information disclosure. This way a potential attack can retrieve additional information about installed system and third party extensions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free