Description
TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services.
Remediation
References
Related Vulnerabilities
PHP Out-of-bounds Read Vulnerability (CVE-2020-7060)
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.24)
Drupal Improper Authentication Vulnerability (CVE-2019-10911)
WordPress Plugin The Holiday Calendar Cross-Site Scripting (1.11.2)
WordPress Plugin 5gig Concerts Unspecified Vulnerability (1.0)