CVE-2010-3714

The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers to read arbitrary files via unspecified vectors.

CVSS v2.0

7.1 HIGHAV:N/AC:M/Au:N/C:C/I:N/A:N

EPSS

24.13% chance of exploitation in the next 30 days, 98th percentile

Published

2010-10-25

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/15856

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/typo3_sa_2010_020.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/15856

References

• CVE Record
• NVD entry

Related

• CVE-2010-3709
• CVE-2010-3742
• CVE-2010-3695
• CVE-2010-3743
• CVE-2010-3683
• CVE-2010-3747