VULNERABILITY INTELLIGENCE

CVE-2012-6146

CVSS score4 MEDIUM
EPSS probability0.99%
CISA KEVNot currently listed
Published2014-05-20
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:N/A:N

Description

The Backend History Module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 does not properly restrict access, which allows remote authenticated editors to read the history of arbitrary records via a crafted URL.

Primary references