CVE-2011-4904
Fixed in a distro release EPSS 1%
TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services.
Products: TYPO3
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Packagist | typo3/cms | 4.4.9 |
| Packagist | typo3/cms | 4.5.4 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 5.0 | typo3-src | 4.2.5-1+lenny8 |
| Debian 6.0 | typo3-src | 4.3.9+dfsg1-1+squeeze1 |