Threats Tagged 'ghsa-4f2f-jr2m-j7p4'
View all threats tagged with 'ghsa-4f2f-jr2m-j7p4'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-4f2f-jr2m-j7p4'
Click on any threat for detailed analysis and mitigation recommendations
A broken access control vulnerability exists in TYPO3 CMS backend and Install Tool due to ineffective referrer enforcement starting from version 13.0. This allows requests originating from any script running on the TYPO3 instance's own domains, such as frontend pages, to be accepted by backend and Install Tool endpoints. Attackers who can execute JavaScript on these domains, for example via cross-site scripting, could invoke these endpoints with the privileges of an authenticated user. The vulnerability affects TYPO3 CMS versions 13.0.0 through 13.4.33 and 14.0.0 through 14.3.5. A patch is available to address this issue. Join the discussion | GCVE Database | 08/11/2026, 09:32:33 UTC Added: 09/02/2026, 15:50:06 UTC |
Showing 1 to 1 of 1 result