CVE-2021-36792

Mô tả

Tham khảo

• typo3.org/help/security-advisories/security · Vendor Advisory
• typo3.org/security/advisory/typo3-ext-sa-2021-013 · Vendor Advisory

Lỗ hổng khác của dated news

• CVE-2021-36791TRUNG BÌNH 5.3The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data.
• CVE-2021-36790TRUNG BÌNH 6.1The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS.
• CVE-2021-36789NGHIÊM TRỌNG 9.8The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection.