CVE-2021-36792

概要

参考情報

• typo3.org/help/security-advisories/security · Vendor Advisory
• typo3.org/security/advisory/typo3-ext-sa-2021-013 · Vendor Advisory

dated news のその他の脆弱性

• CVE-2021-36791中 5.3The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data.
• CVE-2021-36790中 6.1The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS.
• CVE-2021-36789緊急 9.8The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection.