Vulnerabilities

TI-2021-14913 CVE-2021-36792 · GHSA-hmf3-7332-95f3

The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access…

LOW 33

The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00672 Published 2021-08-13 No fix listed

TI-2021-14912 CVE-2021-36791 · GHSA-26rp-x6jf-5qx8

LOW 25

The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00801 Published 2021-08-13 No fix listed

TI-2021-14911 CVE-2021-36790 · GHSA-fhw2-75x3-cgj8

LOW 28

The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00586 Published 2021-08-13 No fix listed CWE-79

TI-2021-14910 CVE-2021-36789 · GHSA-w8g2-q4x3-fc97

MEDIUM 44

The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00996 Published 2021-08-13 No fix listed CWE-89