CVE-2011-4901: Typo3 Arbitrary Information Disclosure
Typo3 Arbitrary Information Disclosure
Other sources
TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to extract arbitrary information from the TYPO3 database.
— GitHub
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/typo3/cmsto a version that resolves this vulnerability.Fixed in 4.5.4 - Upgrade
Upgrade
composer/typo3/cmsto a version that resolves this vulnerability.Fixed in 4.4.9 - Upgrade
Upgrade
composer/typo3/cmsto a version that resolves this vulnerability.Fixed in 4.3.12
Event History
Frequently Asked Questions
What is CVE-2011-4901?
CVE-2011-4901 is a vulnerability in TYPO3 that allows remote attackers to extract arbitrary information from the TYPO3 database.
What is the severity of CVE-2011-4901?
The severity of CVE-2011-4901 is medium with a CVSS score of 6.5.
Which versions of TYPO3 are affected by CVE-2011-4901?
TYPO3 versions before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 are affected by CVE-2011-4901.
How can an attacker exploit CVE-2011-4901?
An attacker can exploit CVE-2011-4901 to remotely extract arbitrary information from the TYPO3 database.
Where can I find more information about CVE-2011-4901?
For more information about CVE-2011-4901, you can refer to the TYPO3 security advisory TYPO3-CORE-SA-2011-001 and the Debian security tracker.