Information disclosure in TYPO3

CVE-2012-1607

The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the database name via a direct request.

Vulnerability class: Information Disclosure

EPSS: 0.031 (86.4th percentile) — read the EPSS interpretation.

Affected products

  • Typo3 — versions 4.4, 4.4.0, 4.4.1
  • N/a — versions n/a

Weakness classification (CWE)

References