Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2020-26229 | First vendor Publication | 2020-11-23 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L | |||
|---|---|---|---|
| Overall CVSS Score | 3.7 | ||
| Base Score | 3.7 | Environmental Score | 3.7 |
| impact SubScore | 2.5 | Temporal Score | 3.7 |
| Exploitabality Sub Score | 1.2 | ||
| Attack Vector | Network | Attack Complexity | High |
| Privileges Required | Low | User Interaction | Required |
| Scope | Unchanged | Confidentiality Impact | Low |
| Integrity Impact | None | Availability Impact | Low |
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:H/Au:S/C:P/I:N/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 3.6 | Attack Range | Network |
| Cvss Impact Score | 4.9 | Attack Complexity | High |
| Cvss Expoit Score | 3.9 | Authentication | Requires single instance |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| TYPO3 is an open source PHP based web content management system. In TYPO3 from version 10.4.0, and before version 10.4.10, RSS widgets are susceptible to XML external entity processing. This vulnerability is reasonable, but is theoretical - it was not possible to actually reproduce the vulnerability with current PHP versions of supported and maintained system distributions. At least with libxml2 version 2.9, the processing of XML external entities is disabled per default - and cannot be exploited. Besides that, a valid backend user account is needed. Update to TYPO3 version 10.4.10 to fix the problem described. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26229 |
CPE : Common Platform Enumeration
Sources (Detail)
| Source | Url |
|---|
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 13:42:44 |
|
| 2024-08-02 13:14:32 |
|
| 2024-08-02 01:21:59 |
|
| 2024-02-02 02:15:22 |
|
| 2024-02-01 12:20:35 |
|
| 2023-09-05 13:09:49 |
|
| 2023-09-05 01:20:12 |
|
| 2023-09-02 13:08:37 |
|
| 2023-09-02 01:20:30 |
|
| 2023-08-12 13:13:21 |
|
| 2023-08-12 01:19:45 |
|
| 2023-08-11 13:06:25 |
|
| 2023-08-11 01:20:23 |
|
| 2023-08-06 13:04:40 |
|
| 2023-08-06 01:19:35 |
|
| 2023-08-04 13:05:02 |
|
| 2023-08-04 01:19:52 |
|
| 2023-07-14 13:05:02 |
|
| 2023-07-14 01:19:43 |
|
| 2023-03-29 02:07:39 |
|
| 2023-03-28 12:19:56 |
|
| 2022-10-11 12:58:03 |
|
| 2022-10-11 01:19:32 |
|
| 2021-05-05 01:39:09 |
|
| 2021-05-04 13:50:48 |
|
| 2021-04-22 03:02:07 |
|
| 2020-12-02 00:23:00 |
|
| 2020-11-24 17:22:51 |
|
| 2020-11-24 05:22:51 |
|
