TYPO3 is vulnerable to Information Disclosure in the HTML mailing API

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2010-3673 · ADVISORY
• TYPO3/typo3 commit 3e24a0f · WEB
• TYPO3/typo3 commit 46693d4 · WEB
• TYPO3/typo3 commit a3a62d9 · WEB
• bugs.debian.org/cgi-bin/bugreport.cgi · WEB
• TYPO3-CMS/core · PACKAGE
• security-tracker.debian.org/tracker/CVE-2010-3673 · WEB
• typo3.org/security/advisory/typo3-sa-2010-012 · WEB

Lỗ hổng khác của typo3/cms-core

• CVE-2026-19418CAO 7.3The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 (CVE-2020-11069) became ineffective in TYPO3 v13.0, where TYPO3 CMS started …
• CVE-2026-49742CAO 7.1Backend users with file download permissions were able to download files from the fallback storage of the file abstraction layer (FAL) via t…
• CVE-2026-49741CAO 8.7Backend users with write access to the form_definition database table were able to directly create, update, or delete form definition record…
• CVE-2026-49740TRUNG BÌNH 6.3TYPO3's cache frontend (VariableFrontend) and persistent key-value store (Registry) deserialized PHP payloads without integrity validation o…
• CVE-2026-49738THẤP 2.1The path allowance check in GeneralUtility::isAllowedAbsPath() performed a plain string prefix comparison without requiring a directory sepa…