The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, which allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters.

This update for typo3-cms-4_5 fixes the following issues :

  - CVE-2015-2047: Authentication Bypass     (TYPO3-CORE-SA-2015-001)

  - CVE-2014-9508: Link spoofing and cache poisoning     (TYPO3-CORE-SA-2014-003)

  - TYPO3-CORE-SA-2014-002: Multiple Vulnerabilities

  - CVE-2013-7073: Multiple vulnerabilities     (TYPO3-CORE-SA-2013-004) This update contains the last     upstream release 4.5.40, LTS discontinued since 04.2015.

This update for typo3-cms-4_7 fixes the following issues :

  - CVE-2014-3941: Multiple vulnerabilities     (TYPO3-CORE-SA-2014-001)

  - CVE-2013-4701: Multiple vulnerabilities     (TYPO3-CORE-SA-2014-002)

  - CVE-2013-7073: Multiple vulnerabilities     (TYPO3-CORE-SA-2013-004)

  - other security fixes, e.g. preventing XSS attacks.

The package was updated to last upstream version (discontinued) 4.7.20

Important security fixes for vulnerabilities in typo3 which can be used for Cross-Site Scripting or Denial of Service attacks or for authentication bypassing.

Several vulnerabilities were discovered in TYPO3, a content management system. This update addresses cross-site scripting, information disclosure, mass assignment, open redirection and insecure unserialize vulnerabilities and corresponds to TYPO3-CORE-SA-2013-004.

ID	Name	Product	Family	Severity
93213	openSUSE Security Update : typo3-cms-4_5 (openSUSE-2016-1022)	Nessus	SuSE Local Security Checks	medium
93062	openSUSE Security Update : typo3-cms-4_7 (openSUSE-2016-1002)	Nessus	SuSE Local Security Checks	high
92930	openSUSE Security Update : typo3 (openSUSE-2016-959)	Nessus	SuSE Local Security Checks	high
71782	Debian DSA-2834-1 : typo3-src - several vulnerabilities	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2013-7073

medium

Tenable Plugins

medium

high

high

medium