Description
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secure download feature jumpurl.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP-Forum Multiple SQL Injection Vulnerabilities (1.7.8)
PHP Integer Overflow or Wraparound Vulnerability (CVE-2015-8387)
WordPress Plugin WordPress Backup to Ziddu Cross-Site Scripting (1)
WebLogic CVE-2018-1257 Vulnerability (CVE-2018-1257)
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2019-16943)