Detections
Analytics
SCA: security update for hov/jobfair (GHSA-43g8-79x3-j898)
high Tenable Cloud Security Plugin ID 409899
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- An issue was discovered in the jobfair (aka Job Fair) extension before 1.0.13 and 2.x before 2.0.2 for
TYPO3. The extension fails to protect or obfuscate filenames of uploaded files. This allows
unauthenticated users to download files with sensitive data by simply guessing the filename of uploaded
files (e.g., uploads/tx_jobfair/cv.pdf). (CVE-2021-43564)
See Also
Plugin Details
Severity: High
ID: 409899
Version: Revision 1.5
Type: Local
Family: SCA Checks
Published: 1/23/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 3
Percentile: 23.18
Vendor
Vendor Severity: High
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS Score Source: CVE-2021-43564
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 11/15/2021
Vulnerability Publication Date: 11/10/2021
Reference Information
CVE: CVE-2021-43564
cwe: CWE-200