CVE-2014-9508 : 詳細

CVE-2014-9508

0.29%V4
2015-01-04
21h00 +00:00
A01-Broken Access Control
Network
2024-08-06
13h47 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set and using a homepage with links that only contain anchors, allows remote attackers to change URLs to arbitrary domains for those links via unknown vectors.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-59 Improper Link Resolution Before File Access
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

メトリクス

メトリクス スコア 深刻度 CVSS ベクター 出典
V2 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N nvd@nist.gov

EPSS

EPSSは脆弱性が悪用される可能性を予測するスコアリングモデルです。

EPSSスコア

EPSSモデルは0から1(0〜100%)の確率スコアを算出します。スコアが高いほど、脆弱性が悪用される可能性が高いことを示します。

EPSSパーセンタイル

パーセンタイルはCVEをEPSSスコアで順位付けするために使用されます。例えば、EPSSスコアで95パーセンタイルにあるCVEは、他の95%のCVEよりも悪用される可能性が高いことを意味します。パーセンタイルはCVEのEPSSスコアを他のCVEと比較するために使用されます。

関連製品

構成 0

Typo3>>Typo3 >> Version 4.5.0

Typo3>>Typo3 >> Version 4.5.1

Typo3>>Typo3 >> Version 4.5.2

Typo3>>Typo3 >> Version 4.5.3

Typo3>>Typo3 >> Version 4.5.4

Typo3>>Typo3 >> Version 4.5.5

Typo3>>Typo3 >> Version 4.5.6

Typo3>>Typo3 >> Version 4.5.7

Typo3>>Typo3 >> Version 4.5.8

Typo3>>Typo3 >> Version 4.5.9

Typo3>>Typo3 >> Version 4.5.10

Typo3>>Typo3 >> Version 4.5.11

Typo3>>Typo3 >> Version 4.5.12

Typo3>>Typo3 >> Version 4.5.13

Typo3>>Typo3 >> Version 4.5.14

Typo3>>Typo3 >> Version 4.5.15

Typo3>>Typo3 >> Version 4.5.16

Typo3>>Typo3 >> Version 4.5.17

Typo3>>Typo3 >> Version 4.5.18

Typo3>>Typo3 >> Version 4.5.19

Typo3>>Typo3 >> Version 4.5.20

Typo3>>Typo3 >> Version 4.5.21

Typo3>>Typo3 >> Version 4.5.22

Typo3>>Typo3 >> Version 4.5.23

Typo3>>Typo3 >> Version 4.5.24

Typo3>>Typo3 >> Version 4.5.25

Typo3>>Typo3 >> Version 4.5.26

Typo3>>Typo3 >> Version 4.5.27

Typo3>>Typo3 >> Version 4.5.28

Typo3>>Typo3 >> Version 4.5.29

Typo3>>Typo3 >> Version 4.5.30

Typo3>>Typo3 >> Version 4.5.31

Typo3>>Typo3 >> Version 4.5.32

Typo3>>Typo3 >> Version 4.5.33

Typo3>>Typo3 >> Version 4.5.34

Typo3>>Typo3 >> Version 4.5.35

Typo3>>Typo3 >> Version 4.5.36

Typo3>>Typo3 >> Version 4.5.37

Typo3>>Typo3 >> Version 4.5.38

Typo3>>Typo3 >> Version 4.6.0

Typo3>>Typo3 >> Version 4.6.1

Typo3>>Typo3 >> Version 4.6.2

Typo3>>Typo3 >> Version 4.6.3

Typo3>>Typo3 >> Version 4.6.4

Typo3>>Typo3 >> Version 4.6.5

Typo3>>Typo3 >> Version 4.6.6

Typo3>>Typo3 >> Version 4.6.7

Typo3>>Typo3 >> Version 4.6.8

Typo3>>Typo3 >> Version 4.6.9

Typo3>>Typo3 >> Version 4.6.10

Typo3>>Typo3 >> Version 4.6.11

Typo3>>Typo3 >> Version 4.6.12

Typo3>>Typo3 >> Version 4.6.13

Typo3>>Typo3 >> Version 4.6.14

Typo3>>Typo3 >> Version 4.6.15

Typo3>>Typo3 >> Version 4.6.16

Typo3>>Typo3 >> Version 4.6.17

Typo3>>Typo3 >> Version 4.6.18

Typo3>>Typo3 >> Version 4.7.0

Typo3>>Typo3 >> Version 4.7.1

Typo3>>Typo3 >> Version 4.7.2

Typo3>>Typo3 >> Version 4.7.3

Typo3>>Typo3 >> Version 4.7.4

Typo3>>Typo3 >> Version 4.7.5

Typo3>>Typo3 >> Version 4.7.6

Typo3>>Typo3 >> Version 4.7.7

Typo3>>Typo3 >> Version 4.7.8

Typo3>>Typo3 >> Version 4.7.9

Typo3>>Typo3 >> Version 4.7.10

Typo3>>Typo3 >> Version 4.7.11

Typo3>>Typo3 >> Version 4.7.12

Typo3>>Typo3 >> Version 4.7.13

Typo3>>Typo3 >> Version 4.7.14

Typo3>>Typo3 >> Version 4.7.15

Typo3>>Typo3 >> Version 4.7.16

Typo3>>Typo3 >> Version 4.7.17

Typo3>>Typo3 >> Version 4.7.18

Typo3>>Typo3 >> Version 4.7.19

Typo3>>Typo3 >> Version 4.7.20

Typo3>>Typo3 >> Version 6.0

Typo3>>Typo3 >> Version 6.0.1

Typo3>>Typo3 >> Version 6.0.2

Typo3>>Typo3 >> Version 6.0.3

Typo3>>Typo3 >> Version 6.0.4

Typo3>>Typo3 >> Version 6.0.5

Typo3>>Typo3 >> Version 6.0.6

Typo3>>Typo3 >> Version 6.0.7

Typo3>>Typo3 >> Version 6.0.8

Typo3>>Typo3 >> Version 6.0.9

Typo3>>Typo3 >> Version 6.0.10

Typo3>>Typo3 >> Version 6.0.11

Typo3>>Typo3 >> Version 6.0.12

Typo3>>Typo3 >> Version 6.0.13

Typo3>>Typo3 >> Version 6.0.14

Typo3>>Typo3 >> Version 6.1

Typo3>>Typo3 >> Version 6.1.1

Typo3>>Typo3 >> Version 6.1.2

Typo3>>Typo3 >> Version 6.1.3

Typo3>>Typo3 >> Version 6.1.4

Typo3>>Typo3 >> Version 6.1.5

Typo3>>Typo3 >> Version 6.1.6

Typo3>>Typo3 >> Version 6.1.7

Typo3>>Typo3 >> Version 6.1.8

Typo3>>Typo3 >> Version 6.1.9

Typo3>>Typo3 >> Version 6.2

Typo3>>Typo3 >> Version 6.2.0

Typo3>>Typo3 >> Version 6.2.0

Typo3>>Typo3 >> Version 6.2.0

Typo3>>Typo3 >> Version 6.2.1

Typo3>>Typo3 >> Version 6.2.2

Typo3>>Typo3 >> Version 6.2.3

Typo3>>Typo3 >> Version 6.2.4

Typo3>>Typo3 >> Version 6.2.5

Typo3>>Typo3 >> Version 6.2.6

Typo3>>Typo3 >> Version 6.2.7

Typo3>>Typo3 >> Version 6.2.8

Typo3>>Typo3 >> Version 7.0.0

Typo3>>Typo3 >> Version 7.0.1

参考資料