Read the docs

Routes Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Routes Project records in CISA KEV

No Routes Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Routes 1 record LOW

Records

1 record

TI-2021-14914 CVE-2021-36793 · GHSA-vpw5-grxx-v396

The routes (aka Extbase Yaml Routes) extension before 2.1.1 for TYPO3, when…

Priority LOW 35

The routes (aka Extbase Yaml Routes) extension before 2.1.1 for TYPO3, when CsrfTokenViewHelper is used, allows Sensitive Information Disclosure because a session identifier is unsafely present in HTML output.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01013 Published 2021-08-13 Fixed in 2.1.1 CWE-200
Open these records in search →