{"action":"Upgrade typo3/cms to 4.5.32 or later.","affected":[{"fixed":"4.5.32","introduced":"4.5.0"},{"fixed":"4.7.17","introduced":"4.7.0"},{"fixed":"6.0.12","introduced":"6.0.0"},{"fixed":"6.1.7","introduced":"6.1.0"}],"component":"typo3/cms","cve_ids":["CVE-2013-7073"],"ecosystem":"Packagist","epss":0.01265,"exploited":false,"fixed_versions":["4.5.32","4.7.17","6.0.12","6.1.7"],"ghsa_id":"GHSA-4rpv-g4gq-rh4m","id":"tcs_01M5KEV95QA11HQBDTEABY3PMN","modified_at":"2023-11-08T03:57:27.463407Z","published_at":"2022-05-17T03:46:18Z","references":["https://osv.dev/vulnerability/GHSA-4rpv-g4gq-rh4m","https://nvd.nist.gov/vuln/detail/CVE-2013-7073","https://github.com/TYPO3/typo3","http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00028.html","http://lists.opensuse.org/opensuse-updates/2016-08/msg00083.html","http://lists.opensuse.org/opensuse-updates/2016-08/msg00106.html","http://seclists.org/oss-sec/2013/q4/473","http://seclists.org/oss-sec/2013/q4/487","http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004","http://www.debian.org/security/2014/dsa-2834"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-4rpv-g4gq-rh4m","url":"https://osv.dev/vulnerability/GHSA-4rpv-g4gq-rh4m"}],"summary":"TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component"}