Description
Extbase in TYPO3 4.3.0 before 6.2.24, 7.x before 7.6.8, and 8.1.1 allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted Extbase action.
Remediation
References
Related Vulnerabilities
Ruby Out-of-bounds Read Vulnerability (CVE-2022-28739)
Jenkins Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-2101)
WordPress Plugin Advanced Database Cleaner SQL Injection (3.0.1)
ReviveAdserver Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-7364)
WordPress Uncontrolled Resource Consumption Vulnerability (CVE-2018-6389)