{"id":"GHSA-v4vm-gj2x-6qhm","aliases":["CVE-2014-8328"],"title":"DCE extension for Typo3 Discloses Environment Information","description":"The default configuration in the Dynamic Content Elements (dce) extension before 0.11.5 for TYPO3 allows remote attackers to obtain sensitive installation environment information by reading the update check request.","severity":"medium","score":5.3,"published":"2022-05-17T19:57:24.000Z","modified":"2023-11-08T03:57:45.721Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"t3/dce","ranges":[{"events":[{"introduced":"0"},{"fixed":"0.11.5"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["0.11.5"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2014-8328","https://exchange.xforce.ibmcloud.com/vulnerabilities/97673","https://github.com/a-r-m-i-n/dce","http://typo3.org/extensions/repository/view/dce","http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-015"],"sources":[{"name":"OSV","id":"GHSA-v4vm-gj2x-6qhm","modified":"2023-11-08T03:57:45.721180Z","url":"https://osv.dev/vulnerability/GHSA-v4vm-gj2x-6qhm"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","score":5.3}]}