CVE-2011-4628: Critical severity typo3 typo3 vulnerability
Published Nov 6, 2019
·Updated
TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to bypass authentication mechanisms in the backend through a crafted request.
Affected Software
7 affected componentsFixes available
debian/typo3-src
composer/typo3/cms>=4.5.0<4.5.4
4.5.4
composer/typo3/cms>=4.4.0<4.4.9
4.4.9
composer/typo3/cms<4.3.12
4.3.12
Typo3 TYPO3>=4.5.0<4.5.4
Typo3 TYPO3>=4.3.0<4.3.12
Typo3 TYPO3>=4.4.0<4.4.9
Event History
Nov 6, 2019
CVE Published
via MITRE·04:22 PM
Data Sourced
via MITRE·04:22 PM
DescriptionWeakness
Apr 22, 2022
Advisory Published
via GitHub·12:24 AM
Frequently Asked Questions
1
What is the severity of CVE-2011-4628?
CVE-2011-4628 is classified as a medium severity vulnerability due to its potential for unauthorized access through authentication bypass.
2
How do I fix CVE-2011-4628?
To fix CVE-2011-4628, upgrade TYPO3 to version 4.3.12, 4.4.9, or 4.5.4 or later.
3
Who is affected by CVE-2011-4628?
CVE-2011-4628 affects users of TYPO3 versions before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4.
4
What type of vulnerability is CVE-2011-4628?
CVE-2011-4628 is an authentication bypass vulnerability that allows remote attackers to exploit backend security mechanisms.
5
Can CVE-2011-4628 be exploited remotely?
Yes, CVE-2011-4628 can be exploited remotely by sending a crafted request to the TYPO3 backend.