CVE-2011-4904

TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-11-06 17:15

Updated : 2023-12-10 13:13


NVD link : CVE-2011-4904

Mitre link : CVE-2011-4904

CVE.ORG link : CVE-2011-4904


JSON object : View

Products Affected

typo3

  • typo3
CWE
CWE-20

Improper Input Validation