VULNERABILITY INTELLIGENCE
CVE-2014-3942
CVSS score6 MEDIUM
EPSS probability1.63%
CISA KEVNot currently listed
Published2014-06-03
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:P/I:P/A:P
Description
The Color Picker Wizard component in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, and 6.1.0 before 6.1.9 allows remote authenticated editors to execute arbitrary PHP code via a serialized PHP object.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')