Dated News Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Dated News Project records in CISA KEV

No Dated News Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2021-14910 CVE-2021-36789 · GHSA-w8g2-q4x3-fc97

MEDIUM 44

The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00996 Published 2021-08-13 No fix listed CWE-89

TI-2021-14913 CVE-2021-36792 · GHSA-hmf3-7332-95f3

LOW 33

The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00672 Published 2021-08-13 No fix listed

TI-2021-14911 CVE-2021-36790 · GHSA-fhw2-75x3-cgj8

LOW 28

The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00586 Published 2021-08-13 No fix listed CWE-79

TI-2021-14912 CVE-2021-36791 · GHSA-26rp-x6jf-5qx8

LOW 25

The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00801 Published 2021-08-13 No fix listed