VIR Vulnerability Intelligence Relay

CVE-2017-6370

medium
Published 2017-03-17 · Modified 2024-04-25
CVSS v3
5.3
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v2
5.0
VIR risk
5.3

Description

TYPO3 Information Disclosure Vulnerability

Predictions

Exploit likelihood
63%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Package impact
EcosystemPackageVulnerableFixed
php Packagisttypo3/cms

Application impact
VendorProductVersionsFixed
typo3typo37.6.15

References

CWEs

CWE-319

Verify integrity in audit chain (admin only). AS-IS.