1 result · Clear filters · Feed
-
Medium 5.3
Insecure Direct Object Reference in extension "Content Consent" (content_consent)
An issue was discovered in the content_consent (aka Content Consent) extension through 2.0.1 for TYPO3. It fails to verify whether a specified content element identifier is permitted by the plugin. This enables an unauthenticated user to display various conte…