CVE-2020-25025

The l10nmgr (aka Localization Manager) extension before 7.4.0, 8.x before 8.7.0, and 9.x before 9.2.0 for TYPO3 allows Information Disclosure (translatable fields).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 33%
VendorProductVersion
localization_manager_projectlocalization_manager
𝑥
< 7.4.0
localization_manager_projectlocalization_manager
8.0.0 ≤
𝑥
< 8.7.0
localization_manager_projectlocalization_manager
9.0.0 ≤
𝑥
< 9.2.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://typo3.org/help/security-advisories
https://typo3.org/security/advisory/typo3-ext-sa-2020-016
https://typo3.org/help/security-advisories
https://typo3.org/security/advisory/typo3-ext-sa-2020-016