CVE-2012-6146 describes an access restriction vulnerability in the Backend History Module of TYPO3 versions 4.5.x, 4.6.x, and 4.7.x. Authenticated editors can exploit this by crafting a URL to read the history of arbitrary records. With a CVSS score of 4.0, this vulnerability is of moderate severity, requiring authentication (Au:S) but having low access complexity (AC:L). The primary impact is a potential information disclosure (C:P) as attackers can read sensitive historical data. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, suggesting low public awareness and attention for this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
4.6.0CPE matchmatch criteria | cpe:2.3:a:typo3:typo3:4.6.0:*:*:*:*:*:*:* | ||
4.6.1CPE matchmatch criteria | cpe:2.3:a:typo3:typo3:4.6.1:*:*:*:*:*:*:* | ||
4.6.2CPE matchmatch criteria | cpe:2.3:a:typo3:typo3:4.6.2:*:*:*:*:*:*:* | ||
4.6.3CPE matchmatch criteria | cpe:2.3:a:typo3:typo3:4.6.3:*:*:*:*:*:*:* | ||
4.6.4CPE matchmatch criteria | cpe:2.3:a:typo3:typo3:4.6.4:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:S/C:P/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.