Added |
CVSS V3.1 |
|
NIST AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
|
Added |
CVSS V2 |
|
NIST (AV:N/AC:M/Au:N/C:P/I:P/A:N)
|
Added |
CPE Configuration |
|
OR
*cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:* versions from (including) 6.2.0 up to (excluding) 6.2.57
*cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:* versions from (including) 7.0.0 up to (excluding) 7.6.51
*cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:* versions from (including) 8.0.0 up to (excluding) 8.7.40
*cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:* versions from (including) 9.0.0 up to (excluding) 9.5.25
*cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:* versions from (including) 10.0.0 up to (excluding) 10.4.14
*cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:* versions from (including) 11.0.0 up to (excluding) 11.1.1
|
Changed |
Reference Type |
https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp No Types Assigned
|
https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp Third Party Advisory
|
Changed |
Reference Type |
https://packagist.org/packages/typo3/cms-core No Types Assigned
|
https://packagist.org/packages/typo3/cms-core Release Notes, Third Party Advisory
|
Changed |
Reference Type |
https://typo3.org/security/advisory/typo3-core-sa-2021-001 No Types Assigned
|
https://typo3.org/security/advisory/typo3-core-sa-2021-001 Vendor Advisory
|
Added |
CVSS V2 Metadata |
|
Victim must voluntarily interact with attack mechanism
|