Description

The (old) Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary HMAC signatures and bypass intended access restrictions via unspecified vectors.

Remediation

References

CVE-2013-7081

Related Vulnerabilities

WordPress Plugin Helios Solutions Brand Logo Slider Arbitrary File Upload (2.1)

Oracle HTTP Server CVE-2021-25219 Vulnerability (CVE-2021-25219)

WordPress Plugin Advanced Woo Search Information Disclosure (1.99)

XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29527)

IBM RTC Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-1753)

Severity

Medium

Classification

CVE-2013-7081 CWE-264

Tags

Missing Update Known Vulnerabilities