dated news vulnerabilities and fixes

Recent CVEs affecting dated news, with upgrade or downgrade steps. 4 tracked.

Also searched as: datednews.

dated news has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2021-08-13. Highest priority: CVE-2021-36789 (score 55/100).

• CVE-2021-36792 HIGH 7.2 UPGRADE The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming
• CVE-2021-36791 MEDIUM 5.3 UPGRADE The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application
• CVE-2021-36790 MEDIUM 6.1 UPGRADE The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS.
• CVE-2021-36789 CRITICAL 9.8 UPGRADE The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection.

FAQ

How do I fix dated news vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is dated news being exploited right now?

None of the tracked dated news CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which dated news CVE should I patch first?

CVE-2021-36789 currently ranks highest (55/100): The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection..

RSS feed for dated news · ← Back to latest CVEs