VULNERABILITY INTELLIGENCE
CVE-2013-7073
CVSS score4 MEDIUM
EPSS probability1.26%
CISA KEVNot currently listed
Published2013-12-23
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:N/A:N
Description
The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, which allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters.