Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
TYPO3 Permissions Privileges and Access Controls Vulnerability - CVE-2010-3714 - Vulnerability Database
TYPO3

TYPO3 Permissions Privileges and Access Controls Vulnerability - CVE-2010-3714

High
Reference: CVE-2010-3714
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2010-3714
Title: TYPO3 Permissions Privileges and Access Controls Vulnerability
Overview:

The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15 4.3.x before 4.3.7 and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions which allows remote attackers to read arbitrary files via unspecified vectors.