{"id":"GHSA-p65f-652v-35r2","aliases":["CVE-2009-4160"],"title":"TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"Unspecified vulnerability in the Simple download-system with counter and categories (kk_downloader) extension 1.2.1 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors.","severity":"medium","score":6.9,"published":"2022-05-02T03:52:20.000Z","modified":"2025-04-10T12:42:12.771Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"jweiland/kk-downloader","sources":[{"name":"OSV · GHSA-p65f-652v-35r2","url":"https://osv.dev/vulnerability/GHSA-p65f-652v-35r2"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.2.2"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["1.2.2"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2009-4160","https://github.com/jweiland-net/kk_downloader","https://web.archive.org/web/20091219105714/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017","https://web.archive.org/web/20200228220902/http://www.securityfocus.com/bid/37168"],"sources":[{"name":"OSV","id":"GHSA-p65f-652v-35r2","modified":"2025-04-10T12:42:12.771766Z","url":"https://osv.dev/vulnerability/GHSA-p65f-652v-35r2"}],"assessments":[{"source":"OSV","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","score":6.9}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T11:55:31.891Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}