typo3-cms/frontend · Security
TYPO3 is vulnerable to Spam Abuse in the native form content element
- GHSA ID
- GHSA-48ww-8h7g-4hwq
- CVE ID
- CVE-2010-3667
- Severity
- medium
- Published
- Updated
- CVSS
- 5.3 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS v3
- 5.3 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element. An attacker could abuse the form to send mails to arbitrary email addresses.
CWEs
- CWE-20 · Improper Input Validation
References
- https://nvd.nist.gov/vuln/detail/CVE-2010-3667 ↗
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719 ↗
- https://security-tracker.debian.org/tracker/CVE-2010-3667 ↗
- https://typo3.org/security/advisory/typo3-sa-2010-012/#Spam_Abuse ↗
- https://github.com/TYPO3/typo3/commit/34da374183dd472fa7987ee25b47544a06bd2173 ↗
- https://github.com/TYPO3/typo3/commit/5eb60976cea268b879e02811208e6a1777674cbb ↗
- https://github.com/TYPO3/typo3/commit/78dbe326df7ebc612f40882920a426c82b2ca9d3 ↗
- https://github.com/TYPO3/typo3/commit/f82696c7d62842edb0bf79ef21a85d56735a1527 ↗
- https://github.com/advisories/GHSA-48ww-8h7g-4hwq ↗