Vulnerability in Daniel Lienert Yet Another Gallery

CVE-2014-6289

The Ajax dispatcher for Extbase in the Yet Another Gallery (yag) extension before 3.0.1 and Tools for Extbase development (pt_extbase) extension before 1.5.1 allows remote attackers to bypass access restrictions and execute arbitrary controller actions via unspecified vectors.

EPSS: 0.015 (72.0th percentile) — read the EPSS interpretation.

Affected products

Daniel_lienert Yet_another_gallery
Michael_knoll Tools_for_extbase_developmen
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)