← Back

CVE-2014-3941

nvd nist
Published: Jun 3, 2014Modified: May 6, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:P/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allows remote attackers to have unspecified impact via a crafted HTTP Host header, related to "Host Spoofing."

Affected (82)

Products: Typo3: Typo3
1 product
Typo3
Configuration A
19 vulnerable
Vulnerable SoftwareAffected Versions
Typo3
Version 4.7.0
Version 4.7.10
Version 4.7.11
Version 4.7.12
Version 4.7.13
Version 4.7.14
Version 4.7.15
Version 4.7.16
Version 4.7.17
Version 4.7.18
Version 4.7.1
Version 4.7.2
Version 4.7.3
Version 4.7.4
Version 4.7.5
Version 4.7.6
Version 4.7.7
Version 4.7.8
Version 4.7.9
Configuration B
34 vulnerable
Vulnerable SoftwareAffected Versions
Typo3
Version 4.5.0
Version 4.5.10
Version 4.5.11
Version 4.5.12
Version 4.5.13
Version 4.5.14
Version 4.5.15
Version 4.5.16
Version 4.5.17
Version 4.5.18
Version 4.5.19
Version 4.5.1
Version 4.5.20
Version 4.5.21
Version 4.5.22
Version 4.5.23
Version 4.5.24
Version 4.5.25
Version 4.5.26
Version 4.5.27
Version 4.5.28
Version 4.5.29
Version 4.5.2
Version 4.5.30
Version 4.5.31
Version 4.5.32
Version 4.5.33
Version 4.5.3
Version 4.5.4
Version 4.5.5
Version 4.5.6
Version 4.5.7
Version 4.5.8
Version 4.5.9
Configuration C
6 vulnerable
Vulnerable SoftwareAffected Versions
Typo3
Version 6.2.0 beta1
Version 6.2.0 beta2
Version 6.2.0 beta3
Version 6.2.1
Version 6.2.2
Version 6.2
Configuration D
9 vulnerable
Vulnerable SoftwareAffected Versions
Typo3
Version 6.1.1
Version 6.1.2
Version 6.1.3
Version 6.1.4
Version 6.1.5
Version 6.1.6
Version 6.1.7
Version 6.1.8
Version 6.1
Configuration E
14 vulnerable
Vulnerable SoftwareAffected Versions
Typo3
Version 6.0.10
Version 6.0.11
Version 6.0.12
Version 6.0.13
Version 6.0.1
Version 6.0.2
Version 6.0.3
Version 6.0.4
Version 6.0.5
Version 6.0.6
Version 6.0.7
Version 6.0.8
Version 6.0.9
Version 6.0

Timeline

No history available yet.