CVE-2010-3716 | BDVDB-2026-43818 Detail

Description#

The be_user_creation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain privileges via a crafted POST request that creates a user account with arbitrary group memberships.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/43786
http://www.debian.org/security/2010/dsa-2121
http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-020/

Exploit#

No public exploit known

History#

Version 12010-10-25Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.