本ページは dated_news_project dated_news に影響する公開済み CVE(NVD の CPE 経由で関連付け)を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS(%) | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2021-36792 | The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications. | [email protected] | 7.2 | 0.67% | 2021-08-13 | 2024-11-21 |
| CVE-2021-36791 | The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data. | [email protected] | 5.3 | 0.80% | 2021-08-13 | 2024-11-21 |
| CVE-2021-36790 | The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS. | [email protected] | 6.1 | 0.59% | 2021-08-13 | 2024-11-21 |
| CVE-2021-36789 | The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection. | [email protected] | 9.8 | 1.00% | 2021-08-13 | 2024-11-21 |