CVE-2013-4320: Medium severity Typo3 TYPO3 vulnerability
Published May 20, 2014
·Updated
The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.9 and 6.1.x before 6.1.4 does not properly check permissions, which allows remote authenticated users to create or read arbitrary files via a crafted URL.
Affected Software
15 affected componentsFixes available
composer/typo3/cms-core>=6.1<6.1.4
6.1.4
composer/typo3/cms-core>=6.0<6.0.9
6.0.9
Typo3 TYPO3=6.1
Typo3 TYPO3=6.1.1
Typo3 TYPO3=6.1.2
Typo3 TYPO3=6.1.3
Typo3 TYPO3=6.0
Typo3 TYPO3=6.0.1
Typo3 TYPO3=6.0.2
Typo3 TYPO3=6.0.3
Typo3 TYPO3=6.0.4
Typo3 TYPO3=6.0.5
Typo3 TYPO3=6.0.6
Typo3 TYPO3=6.0.7
Typo3 TYPO3=6.0.8
Event History
May 20, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
DescriptionSeverityWeaknessAffected Software
May 17, 2022
Advisory Published
04:43 AM
Frequently Asked Questions
1
What is the severity of CVE-2013-4320?
CVE-2013-4320 is considered a moderate severity vulnerability as it allows authenticated users to access or manipulate files without proper permissions.
2
How do I fix CVE-2013-4320?
To fix CVE-2013-4320, update TYPO3 to version 6.0.9 or 6.1.4 or later.
3
What versions of TYPO3 are affected by CVE-2013-4320?
CVE-2013-4320 affects TYPO3 versions 6.0.x before 6.0.9 and 6.1.x before 6.1.4.
4
Can CVE-2013-4320 be exploited remotely?
Yes, CVE-2013-4320 can be exploited by remote authenticated users through crafted URLs.
5
What components are primarily involved in CVE-2013-4320?
CVE-2013-4320 primarily involves the File Abstraction Layer (FAL) in TYPO3.