CVE-2024-47780CWE-863

Information Disclosure in TYPO3 Page Tree

Low · published October 8, 2024

CVSS v3.1
3.1
EPSS
0%
Percentile
21.7
In the wild
Unconfirmed
What it is

TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/group, or if no mounts were configured but the pages allowed access to "everybody." However, affected users could not manipulate these pages. Users are advised to update to TYPO3 versions 10.4.46 ELTS, 11.5.40 LTS, 12.4.21 LTS, 13.3.1 that fix the problem described. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00302 · 21.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2024-10-08T17:57Z
EPSS history
Timeline
  • 08 OCT 17:57Z
    Information Disclosure in TYPO3 Page Tree
    cvelistv5