Skip to content
OpenAdvisories

Product · TYPO3

Extension "Modules"

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.0

    Information Disclosure in extension "Modules" (modules)

    The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privileged backend user can supply arbitrary table, field and record parameters, and trigger an error resp…