[TYPO3-ttnews] info about TYPO3-EXT-SA-2014-003: Insecure Unserialize in extension News (tt_news)

Rupert Germann rupi at gmx.li
Wed Feb 12 15:23:10 CET 2014


Hi,

some words about the vulnerability in tt_news:

the affected/unsafe part of tt_news is the category menu (CATMENU) in 
mode "ajaxtree" when it is displayed on the website.

That means:
if you don't use a CATMENU on your website, you're save.

greets
Rupert


More information about the TYPO3-project-tt-news mailing list