Thursday, September 2, 2010

New typo3-src packages: fix several vulnerabilities

Users of New typo3-src packages please be advised of a New typo3-src packages fix several vulnerabilities that has been identified.

To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

Amplify’d from www.criticalwatch.com
DSA 2098-1: [DSA 2098-1] New typo3-src packages fix several vulnerabilities
Vulnerability : several
Several remote vulnerabilities have been discovered in the TYPO3 web

content management framework: cross-site Scripting, open redirection,

SQL injection, broken authentication and session management,

insecure randomness, information disclosure and arbitrary code

execution. More details can be found in the Typo3 security advisory:

http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-012/
Read more at www.criticalwatch.com
 

No comments:

Post a Comment