CVE-2009-0815
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 42%
from disclosure to weapon0 days
Published on NVDMar 5
1st PoCFeb 10
metasploitFeb 10
exploitation probability
42%top 1% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret (juHash) in an error message, which allows remote attackers to read arbitrary files by including the hash in a request.
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/8038unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.