Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-75re-n41m-y3et |
| Summary | TYPO3 Improper Access Control vulnerability
The (old) Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary HMAC signatures and bypass intended access restrictions via unspecified vectors. |
| Aliases |
| 0 |
|
| 1 |
| alias |
GHSA-r674-mc9p-hvw5 |
|
|
| Fixed_packages |
|
| Affected_packages |
|
| References |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2013-7081 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00171 |
| scoring_system |
epss |
| scoring_elements |
0.38176 |
| published_at |
2026-04-24T12:55:00Z |
|
| 1 |
| value |
0.00171 |
| scoring_system |
epss |
| scoring_elements |
0.38431 |
| published_at |
2026-04-11T12:55:00Z |
|
| 2 |
| value |
0.00171 |
| scoring_system |
epss |
| scoring_elements |
0.38393 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.00171 |
| scoring_system |
epss |
| scoring_elements |
0.38368 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00171 |
| scoring_system |
epss |
| scoring_elements |
0.38416 |
| published_at |
2026-04-16T12:55:00Z |
|
| 5 |
| value |
0.00171 |
| scoring_system |
epss |
| scoring_elements |
0.38396 |
| published_at |
2026-04-18T12:55:00Z |
|
| 6 |
| value |
0.00171 |
| scoring_system |
epss |
| scoring_elements |
0.38333 |
| published_at |
2026-04-21T12:55:00Z |
|
| 7 |
| value |
0.00171 |
| scoring_system |
epss |
| scoring_elements |
0.38331 |
| published_at |
2026-04-01T12:55:00Z |
|
| 8 |
| value |
0.00171 |
| scoring_system |
epss |
| scoring_elements |
0.38468 |
| published_at |
2026-04-02T12:55:00Z |
|
| 9 |
| value |
0.00171 |
| scoring_system |
epss |
| scoring_elements |
0.38492 |
| published_at |
2026-04-04T12:55:00Z |
|
| 10 |
| value |
0.00171 |
| scoring_system |
epss |
| scoring_elements |
0.38356 |
| published_at |
2026-04-07T12:55:00Z |
|
| 11 |
| value |
0.00171 |
| scoring_system |
epss |
| scoring_elements |
0.38407 |
| published_at |
2026-04-08T12:55:00Z |
|
| 12 |
| value |
0.00171 |
| scoring_system |
epss |
| scoring_elements |
0.38415 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2013-7081 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
|
| Weaknesses |
| 0 |
| cwe_id |
284 |
| name |
Improper Access Control |
| description |
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
|
| 1 |
| cwe_id |
1035 |
| name |
OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities |
| description |
Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017. |
|
| 2 |
| cwe_id |
264 |
| name |
Permissions, Privileges, and Access Controls |
| description |
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control. |
|
| 3 |
| cwe_id |
937 |
| name |
OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities |
| description |
Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013. |
|
|
| Exploits |
|
| Severity_range_score | 4.0 - 6.9 |
| Exploitability | 0.5 |
| Weighted_severity | 6.2 |
| Risk_score | 3.1 |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-75re-n41m-y3et |