CVE-2021-36789

Mô tả

Tham khảo

• typo3.org/help/security-advisories/security · Vendor Advisory
• typo3.org/security/advisory/typo3-ext-sa-2021-013 · Vendor Advisory

Lỗ hổng khác của dated news

• CVE-2021-36792CAO 7.2The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications.
• CVE-2021-36791TRUNG BÌNH 5.3The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data.
• CVE-2021-36790TRUNG BÌNH 6.1The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS.