Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-25025 EUVD-2021-1460GHSA-cv9j-78f7-w6v9

Incorrect Authorization in TYPO3 extension

Published Sep 2, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

The l10nmgr (aka Localization Manager) extension before 7.4.0, 8.x before 8.7.0, and 9.x before 9.2.0 for TYPO3 allows Information Disclosure (translatable fields).

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist localizationteam/l10nmgr < 7.4.0 7.4.0 GHSA-cv9j-78f7-w6v9
Packagist localizationteam/l10nmgr >= 8.0.0, < 8.7.0 8.7.0 GHSA-cv9j-78f7-w6v9
Packagist localizationteam/l10nmgr >= 9.0.0, < 9.2.0 9.2.0 GHSA-cv9j-78f7-w6v9

References