CVE-2020-25025

low-risk

Published 2020-09-02

The l10nmgr (aka Localization Manager) extension before 7.4.0, 8.x before 8.7.0, and 9.x before 9.2.0 for TYPO3 allows Information Disclosure (translatable fields).

Do I need to act?

0.13% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.3/10 Medium

NETWORK / LOW complexity

Affected Products (1)

Localization Manager

Affected Vendors

Localization Manager Project

References (4)

Vendor Advisory https://typo3.org/help/security-advisories

Patch https://typo3.org/security/advisory/typo3-ext-sa-2020-016

Vendor Advisory https://typo3.org/help/security-advisories

Patch https://typo3.org/security/advisory/typo3-ext-sa-2020-016

/ 100

low-risk

Severity 18/34 · Moderate

Exploitability 1/34 · Minimal

Exposure 5/34 · Minimal