What is CVE-2021-43564?

CVE-2021-43564 is a high-severity vulnerability in Job Fair Project. CVSS score: 7.5/10. Published 2021-11-10.

How severe is CVE-2021-43564?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Job Fair Project

CVE-2021-43564

An issue was discovered in the jobfair (aka Job Fair) extension before 1.0.13 and 2.x before 2.0.2 for TYPO3. The extension fails to protect or obfuscate filenames of uploaded files. This allows unauthenticated users to download files with sensitive data by simply guessing the filename of uploaded files (e.g., uploads/tx_jobfair/cv.pdf).

EPSS: 0.010 (59.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Job_fair_project Job_fair
N/a — versions n/a

References

cve@mitre.org (Patch, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-43564?: CVE-2021-43564 is a high-severity vulnerability in Job Fair Project. CVSS score: 7.5/10. Published 2021-11-10.
How severe is CVE-2021-43564?: High severity. CVSS v3 base score is 7.5 out of 10.