typo3-src - several vulnerabilities

Fixed packages 1

Vulnerabilities 5

• High —
  CVE-2010-3714 Public exploit EPSS 24%

  TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism

  The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers …

  typo3/cms Packagist
  Oct 25, 2010
• Medium —
  CVE-2010-3715

  TYPO3 cross-site scripting (XSS) vulnerability in the RemoveXSS function and the backend

  Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the RemoveXSS function, and allow remote auth…

  typo3/cms-backend Packagist
  Oct 25, 2010
• Unscored —
  CVE-2010-3716

  The be_user_creation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain…

  Oct 25, 2010
• Unscored —
  CVE-2010-3717

  The t3lib_div::validEmail function in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not pr…

  Oct 25, 2010
• Unscored —
  CVE-2010-4068

  Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4…

  Oct 25, 2010