Description
The (old) Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary HMAC signatures and bypass intended access restrictions via unspecified vectors.
Remediation
References
Related Vulnerabilities
CKEditor Uncontrolled Resource Consumption Vulnerability (CVE-2021-21254)
Java Denial of Service (DoS) Vulnerability (CVE-2019-2762)
Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-26273)
WordPress Plugin WordPress Console Security Bypass (0.3.9)
WordPress 'wp-admin/options.php' Remote Code Execution Vulnerability (0.6.2 - 2.3.2)