CVE-2024-47780
CVSS 3.1 Score 3.1 of 10 (low)
Details
Published Oct 8, 2024
Updated: Oct 10, 2024
CWE ID 863
Summary
CVE-2024-47780 is a vulnerability affecting TYPO3, a popular open-source Content Management Framework. The issue allows backend users to view restricted pages in the page tree without necessary permissions. This occurs when mounts point to restricted pages or no mounts are configured but access is granted to "everybody." However, users cannot modify these pages. TYPO3 users are advised to update to versions 10.4.46 ELTS, 11.5.40 LTS, 12.4.21 LTS, and 13.3.1 to address this vulnerability. No known workarounds are available.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- TYPO3
Affected Vendors
- TYPO3