CVE-2010-3714

Published: Oct 25, 2010Modified: Apr 29, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:C/I:N/A:N

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers to read arbitrary files via unspecified vectors.

Affected (26)

Products: Typo3: Typo3

Typo3

1 product

Typo3

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Typo3 Typo3	Version 4.2.0
Typo3 Typo3	Version 4.2.10
Typo3 Typo3	Version 4.2.11
Typo3 Typo3	Version 4.2.12
Typo3 Typo3	Version 4.2.13
Typo3 Typo3	Version 4.2.14
Typo3 Typo3	Version 4.2.1
Typo3 Typo3	Version 4.2.2
Typo3 Typo3	Version 4.2.3
Typo3 Typo3	Version 4.2.4
Typo3 Typo3	Version 4.2.5
Typo3 Typo3	Version 4.2.6
Typo3 Typo3	Version 4.2.7
Typo3 Typo3	Version 4.2.8
Typo3 Typo3	Version 4.2.9
Typo3 Typo3	Version 4.3.0
Typo3 Typo3	Version 4.3.1
Typo3 Typo3	Version 4.3.2
Typo3 Typo3	Version 4.3.3
Typo3 Typo3	Version 4.3.4
Typo3 Typo3	Version 4.3.5
Typo3 Typo3	Version 4.3.6
Typo3 Typo3	Version 4.4.1
Typo3 Typo3	Version 4.4.2
Typo3 Typo3	Version 4.4.3
Typo3 Typo3	Version 4.4