Description

The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, which allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters.

Remediation

References

CVE-2013-7073

Related Vulnerabilities

WordPress 3.9.x PHP Object Injection (3.9 - 3.9.33)

Jenkins Other Vulnerability (CVE-2021-21689)

MySQL CVE-2017-3464 Vulnerability (CVE-2017-3464)

WordPress Plugin ByREV WP-PICShield Cross-Site Request Forgery (1.9.7)

WordPress Plugin Watu Quiz Cross-Site Scripting (3.3.9)

Severity

Medium

Classification

CVE-2013-7073 CWE-264

Tags

Missing Update Known Vulnerabilities