CVE-2024-34537

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

TYPO3 before 13.3.1 allows denial of service (interface error) in the Bookmark Toolbar (ext:backend), exploitable by an administrator-level backend user account via manipulated data saved in the bookmark toolbar of the backend user interface. The fixed versions are 10.4.46 ELTS, 11.5.40 LTS, 12.4.21 LTS, and 13.3.1.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published: Oct 28, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-345387.5Mateso PasswordSafe through 8.13.9.26689 has Weak Cryptography.CVE-2024-345399.4Hardcoded credentials in TerraMaster TOS firmware through 5.1 allow a remote attacker to successfully login to the mail or webmail server. T CVE-2024-34543.5An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the connectedhomeip SDK allows a third party t CVE-2024-345425.7Advantech ADAM-5630 shares user credentials plain text between the device and the user source device during the login process.CVE-2024-345437.8Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable escalat CVE-2024-345447.2A command injection vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafte CVE-2024-345455.7Improper input validation in some Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable info CVE-2024-345465.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Habibur Rahman Sticky Social Link stic CVE-2024-345475.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor alam Magical Addons For Elementor CVE-2024-345486.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesgrove WidgetKit allows Stored XS CVE-2024-345495.3Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Automattic WP Job Manager.This issue affects WP Job Manager: fro CVE-2024-34559.8A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerabi