TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to extract arbitrary information from the TYPO3 database.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://security-tracker.debian.org/tracker/CVE-2011-4901 | third party advisory |
https://typo3.org/security/advisory/typo3-core-sa-2011-001/#Information_Disclosure | vendor advisory |