UpHeron
All vulnerabilities

Servers and applications

CVE-2020-15099

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.20, and greater than or equal to 10.0.0 and less than 10.4.6, in a case where an attacker manages to generate a valid cryptographic message authentication code (HMAC-SHA1) - either by using a different existing vulnerability or in case the internal encryptionKey was exposed - it is possible to retrieve arbitrary files of a TYPO3…

Severity
High 8.1
Published
29 Jul 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.5.20, 10.4.6
Sources
NVD

Affected software

SoftwareAffected versions
TYPO3Servers and applications · cpe:a:typo3:typo3
  • From 9.0.0 before 9.5.20
  • From 10.0.0 before 10.4.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-15099
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-15099