GHSA-p65f-652v-35r2

TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure

Source: GitHub Advisory Database (reviewed) Moderate CVE-2009-4160

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	jweiland/kk-downloader	< 1.2.2	1.2.2

Details

As written in the advisory (Markdown source, shown as plain text).

Unspecified vulnerability in the Simple download-system with counter and categories (kk_downloader) extension 1.2.1 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2009-4160 advisory
https://github.com/jweiland-net/kk_downloader package
https://web.archive.org/web/20091219105714/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017 web
https://web.archive.org/web/20200228220902/http://www.securityfocus.com/bid/37168 web