CVE-2010-3714

The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not…

published October 25, 2010

CVSS

—

EPSS

24%

Percentile

97.9

In the wild

Unconfirmed

What it is

The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers to read arbitrary files via unspecified vectors.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.24131 · 97.9th percentile
Published: 2010-10-25T19:00Z

EPSS history

Timeline

25 OCT 19:00Z
The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not…
cvelistv5