TYPO3 is vulnerable to Information Disclosure on the backend

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2010-3664 · ADVISORY
• bugs.debian.org/cgi-bin/bugreport.cgi · WEB
• TYPO3-CMS/backend · PACKAGE
• security-tracker.debian.org/tracker/CVE-2010-3664 · WEB
• typo3.org/security/advisory/typo3-sa-2010-012 · WEB

Lỗ hổng khác của typo3/cms-backend

• CVE-2026-19418CAO 7.3The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 (CVE-2020-11069) became ineffective in TYPO3 v13.0, where TYPO3 CMS started …
• CVE-2026-47352TRUNG BÌNH 5.3Authenticated backend users were able to retrieve file metadata via several Backend API routes without proper permission checks, allowing ac…
• CVE-2026-47351TRUNG BÌNH 5.3Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission checks, which allowed …
• CVE-2026-6553CAO 7.5Changing backend users' passwords via the user settings module results in storing the cleartext password in the uc and user_settings fields …
• CVE-2025-59020TRUNG BÌNH 6.5By exploiting the defVals parameter, attackers could bypass field‑level access checks during record creation in the TYPO3 backend. This gave…