CVE-2011-4904

CVE-2011-4904: vulnerability in TYPO3

Published · Updated

Follow this CVE+ Monitor typo3+ Monitor typo3/cms

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.1%
TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services.
Affected products
TYPO3 · TYPO3
Related CVEs — TYPO3

In the same product, most dangerous first.

CVE-2011-4628—CVE-2011-4628EPSS 1.6%CVE-2011-4901—CVE-2011-4901EPSS 1.1%CVE-2011-4902—CVE-2011-4902EPSS 1.0%CVE-2011-4900—CVE-2011-4900EPSS 1.0%CVE-2011-4627—CVE-2011-4627EPSS 1.0%CVE-2011-4903—CVE-2011-4903EPSS 0.8%