GHSA-h934-f4m4-wc8x
Typo3 Information Disclosure in Page Tree
GHSA-h934-f4m4-wc8x is a vulnerability with no CVSS score yet in typo3/cms, published June 5, 2024. No source lists public exploit code. Fixed in typo3/cms 9.5.6.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
9.5.6typo3/cms +1 more
Description
It has been discovered backend users not having read access to specific pages still could see them in the page tree which actually should be disallowed. A valid backend user account is needed in order to exploit this vulnerability.
Affected packages
What each source reports
GitHub AdvisoriesNo score
Typo3 Information Disclosure in Page Tree
It has been discovered backend users not having read access to specific pages still could see them in the page tree which actually should be disallowed. A valid backend user account is needed in order to exploit this vulnerability.
- Record
GHSA-h934-f4m4-wc8x- Updated
- 2026-11-02
OSVNo score
Typo3 Information Disclosure in Page Tree
It has been discovered backend users not having read access to specific pages still could see them in the page tree which actually should be disallowed. A valid backend user account is needed in order to exploit this vulnerability.
- Record
GHSA-h934-f4m4-wc8x- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.