Description

The configuration module in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to obtain the encryption key via unspecified vectors.

Remediation

References

CVE-2012-3529

Related Vulnerabilities

Elgg Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-3964)

WordPress Plugin Image Slider Cross-Site Scripting (1.1.5)

Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-44025)

WordPress Plugin Admin side data storage for Contact Form 7 Cross-Site Scripting (1.1.1)

WordPress Plugin WP No External Links Spam Injection (4.2.2)

Severity

Low

Classification

CVE-2012-3529 CWE-200

Tags

Missing Update Known Vulnerabilities