CVE-2008-6690 Missing authorization in n/a
Remote attackers can modify the configuration of the TYPO3 antispam plugin due to unspecified vulnerabilities.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not stated
- Fix
- None listed
What is CVE-2008-6690?
CVE-2008-6690 is a high-severity missing authorization vulnerability in n/a, published on 10 Apr 2009. It can be exploited over the network.
Official description
Unspecified vulnerability in nepa-design.de Spam Protection (nd_antispam) extension 1.0.3 for TYPO3 allows remote attackers to modify configuration via unknown vectors.
Which versions are affected by CVE-2008-6690?
It affects 1 product.
Products include Typo3 Nd Antispam.
How do I fix CVE-2008-6690?
No fix has been published for CVE-2008-6690 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2008-6690 being exploited?
There is no known exploitation of CVE-2008-6690 in the wild and no public exploit code.
Sources
Also known as GHSA-68g4-5vhp-p85w.