CVE-2020-25025

EUVD-2021-1460
The l10nmgr (aka Localization Manager) extension before 7.4.0, 8.x before 8.7.0, and 9.x before 9.2.0 for TYPO3 allows Information Disclosure (translatable fields).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 32%
Affected Products (NVD)
VendorProductVersion
localization_manager_projectlocalization_manager
𝑥
< 7.4.0
localization_manager_projectlocalization_manager
8.0.0 ≤
𝑥
< 8.7.0
localization_manager_projectlocalization_manager
9.0.0 ≤
𝑥
< 9.2.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://typo3.org/help/security-advisories
https://typo3.org/security/advisory/typo3-ext-sa-2020-016
https://typo3.org/help/security-advisories
https://typo3.org/security/advisory/typo3-ext-sa-2020-016