{"id":"CVE-2010-3667","aliases":[],"url":"https://o3.security/vulnerability/CVE-2010-3667","summary":"TYPO3 is vulnerable to Spam Abuse in the native form content element","details":"TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element. An attacker could abuse the form to send mails to arbitrary email addresses.","published":"2022-04-21T01:57:47Z","modified":"2024-02-06T23:56:35.637090Z","cvss":{"score":5.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"typo3/cms-frontend","fixedVersion":"4.1.14"},{"ecosystem":"Packagist","name":"typo3/cms-frontend","fixedVersion":"4.2.13"},{"ecosystem":"Packagist","name":"typo3/cms-frontend","fixedVersion":"4.3.4"},{"ecosystem":"Packagist","name":"typo3/cms-frontend","fixedVersion":"4.4.1"}],"fix":{"url":"https://github.com/TYPO3/typo3/commit/34da374183dd472fa7987ee25b47544a06bd2173","label":"TYPO3/typo3@34da374"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3667"},{"type":"WEB","url":"https://github.com/TYPO3/typo3/commit/34da374183dd472fa7987ee25b47544a06bd2173"},{"type":"WEB","url":"https://github.com/TYPO3/typo3/commit/5eb60976cea268b879e02811208e6a1777674cbb"},{"type":"WEB","url":"https://github.com/TYPO3/typo3/commit/78dbe326df7ebc612f40882920a426c82b2ca9d3"},{"type":"WEB","url":"https://github.com/TYPO3/typo3/commit/f82696c7d62842edb0bf79ef21a85d56735a1527"},{"type":"WEB","url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719"},{"type":"PACKAGE","url":"https://github.com/TYPO3-CMS/frontend"},{"type":"WEB","url":"https://security-tracker.debian.org/tracker/CVE-2010-3667"},{"type":"WEB","url":"https://typo3.org/security/advisory/typo3-sa-2010-012/#Spam_Abuse"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-02-06T23:56:35.637090Z"}}