LOW3.7

GHSA-c7p6-3c9c-f88q

Information Disclosure in TYPO3 CMS

Quick fix

GHSA-c7p6-3c9c-f88q — typo3/cms: upgrade to the fixed version with the command below.

composer require typo3/cms:^7.6.22

Details

HTTP requests being performed using the TYPO3 API expose the specific TYPO3 version to the called endpoint.

Enter the version of the package you're using.

Introduced in: 7.6.0Fixed in: 7.6.22

Fixcomposer require typo3/cms:^7.6.22

Introduced in: 8.0.0Fixed in: 8.7.5

Fixcomposer require typo3/cms:^8.7.5