CVE-2020-15086
1 advisory.
Packagist/friendsoftypo3/mediace CVE-2020-15086: critical 9.8
Potential Remote Code Execution in TYPO3 with mediace extension
Action: Upgrade friendsoftypo3/mediace to 7.6.5 or later.
composer require friendsoftypo3/mediace:7.6.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.6.2 | 7.6.5 | - |
Fixed versions
| 7.6.5 |
Sources
- osv: GHSA-4h44-w6fm-548g
- https://github.com/FriendsOfTYPO3/mediace/security/advisories/GHSA-4h44-w6fm-548g
- https://nvd.nist.gov/vuln/detail/CVE-2020-15086
- https://github.com/FriendsOfTYPO3/mediace/pull/31
- https://github.com/FriendsOfTYPO3/mediace/commit/fa29ffd3e8b275782a8600d2406e1b1e5e16ae75
- https://github.com/FriendsOfPHP/security-advisories/blob/master/friendsoftypo3/mediace/CVE-2020-15086.yaml
- https://github.com/FriendsOfTYPO3/mediace
- https://typo3.org/security/advisory/typo3-ext-sa-2020-014
CVE-2020-15086 · published · modified · JSON