VULNERABILITY INTELLIGENCE
CVE-2014-3946
CVSS score4 MEDIUM
EPSS probability1.12%
CISA KEVNot currently listed
Published2014-06-03
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:N/A:N
Description
The query caching functionality in the Extbase Framework component in TYPO3 6.2.0 before 6.2.3 does not properly validate group permissions, which allows remote authenticated users to read arbitrary queries via unspecified vectors.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor