Vulnerabilities (CVE)

Filtered by vendor Routes Project Subscribe
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-36793 1 Routes Project 1 Routes 2024-02-28 5.0 MEDIUM 7.5 HIGH
The routes (aka Extbase Yaml Routes) extension before 2.1.1 for TYPO3, when CsrfTokenViewHelper is used, allows Sensitive Information Disclosure because a session identifier is unsafely present in HTML output.