~ / search / GHSA-q7j5-9j77-g4gq

GHSA-q7j5-9j77-g4gq

Remote code execution in turn extension for TYPO3

Source: GitHub Advisory Database (reviewed) High CVE-2020-15515

Packages

EcosystemPackageAffectedFixed in
Packagist marcwillmann/turn < 0.3.3 0.3.3

Details

As written in the advisory (Markdown source, shown as plain text).

The turn extension through 0.3.2 for TYPO3 allows Remote Code Execution.

References

External links from the advisory. They lead to third-party sites.