Search vulnerabilities

Results 4

Export CSV
CVE-2021-36792

The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Products
CVE-2021-36791

The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Products