Approved changes feed: RSS · Atom
cpe:2.3:a:job_fair_project:job_fair:*:*:*:*:*:typo3:*:*part: a version: * update: *
| Vendor | Job Fair Project (31bc04ed-a781-5252-a33b-cbba07765d49) |
|---|---|
| Product | Job Fair (d8fb6ed7-03c3-51a2-a6c9-a835f2733051) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | typo3 |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-43564 |
vulnerable | 2026-06-08 05:36:43.562168 |
Details available
An issue was discovered in the jobfair (aka Job Fair) extension before 1.0.13 and 2.x before 2.0.2 for TYPO3. The extension fails to protect or obfuscate filenames of uploaded files. This allows unauthenticated users to download files with sensitive data by simply guessing the filename of uploaded files (e.g., uploads/tx_jobfair/cv.pdf).
Published: 2021-11-10T15:04:20.000Z
Updated: 2024-08-04T04:03:08.337Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4606 |
vulnerable | 2026-06-08 05:06:40.251372 |
Details available
Unrestricted file upload vulnerability in the Job Fair (jobfair) extension before 1.0.1 for TYPO3, when using Apache with mod_mime, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the extension upload folder.
Published: 2015-06-16T16:00:00.000Z
Updated: 2024-08-06T06:18:12.132Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.