CVE-2014-8328

Published: Feb 3, 2020Modified: Nov 21, 2024

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

The default configuration in the Dynamic Content Elements (dce) extension before 0.11.5 for TYPO3 allows remote attackers to obtain sensitive installation environment information by reading the update check request.

Affected (5)

Products: Dynamic Content Elements Project: Dynamic Content Elements

Dynamic Content Elements Project

1 product

Dynamic Content Elements

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Dynamic Content Elements Project Dynamic Content Elements	From 0.10.0 to 0.10.2
Dynamic Content Elements Project Dynamic Content Elements	From 0.11.0 to 0.11.5
Dynamic Content Elements Project Dynamic Content Elements	From 0.7.0 to 0.7.5
Dynamic Content Elements Project Dynamic Content Elements	From 0.8.0 to 0.8.6
Dynamic Content Elements Project Dynamic Content Elements	From 0.9.0 to 0.9.4