Vulnerability Details CVE-2014-8325
The Calendar Base (cal) extension before 1.5.9 and 1.6.x before 1.6.1 for TYPO3 allows remote attackers to cause a denial of service (resource consumption) via vectors related to the PHP PCRE library.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.6%
CVSS Severity
CVSS v2 Score 7.8
References
- http://typo3.org/extensions/repository/view/cal
- http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-013/
- http://www.openwall.com/lists/oss-security/2014/10/17/11
- http://www.securityfocus.com/bid/70645
- http://typo3.org/extensions/repository/view/cal
- http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-013/
- http://www.openwall.com/lists/oss-security/2014/10/17/11
- http://www.securityfocus.com/bid/70645
Products affected by CVE-2014-8325
-
cpe:2.3:a:calender_base_project:calender_base:*
-
cpe:2.3:a:calender_base_project:calender_base:1.5.0
-
cpe:2.3:a:calender_base_project:calender_base:1.5.1
-
cpe:2.3:a:calender_base_project:calender_base:1.5.2
-
cpe:2.3:a:calender_base_project:calender_base:1.5.3
-
cpe:2.3:a:calender_base_project:calender_base:1.5.4
-
cpe:2.3:a:calender_base_project:calender_base:1.5.5
-
cpe:2.3:a:calender_base_project:calender_base:1.5.6
-
cpe:2.3:a:calender_base_project:calender_base:1.5.7
-
cpe:2.3:a:calender_base_project:calender_base:1.6.0