Description

The query caching functionality in the Extbase Framework component in TYPO3 6.2.0 before 6.2.3 does not properly validate group permissions, which allows remote authenticated users to read arbitrary queries via unspecified vectors.

Remediation

References

CVE-2014-3946

Related Vulnerabilities

WordPress Plugin GraceMedia Media Player Local File Inclusion (1.0)

Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-8052)

Artifactory Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-46687)

Werkzeug WSGI Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-49767)

MediaWiki Other Vulnerability (CVE-2007-0788)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2014-3946