CVE-2014-6289
03.10.2014, 14:55
The Ajax dispatcher for Extbase in the Yet Another Gallery (yag) extension before 3.0.1 and Tools for Extbase development (pt_extbase) extension before 1.5.1 allows remote attackers to bypass access restrictions and execute arbitrary controller actions via unspecified vectors.Enginsight
| Vendor | Product | Version |
|---|---|---|
| daniel_lienert | yet_another_gallery | 𝑥 ≤ 3.0.0 |
| michael_knoll | tools_for_extbase_developmen | 𝑥 ≤ 1.5.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References