Vulnerabilities > CVE-2021-43564 - Unspecified vulnerability in JOB Fair Project JOB Fair

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

job-fair-project

NVD

Published: 2021-11-10

Updated: 2024-11-21

Summary

An issue was discovered in the jobfair (aka Job Fair) extension before 1.0.13 and 2.x before 2.0.2 for TYPO3. The extension fails to protect or obfuscate filenames of uploaded files. This allows unauthenticated users to download files with sensitive data by simply guessing the filename of uploaded files (e.g., uploads/tx_jobfair/cv.pdf).

Vulnerable Configurations

Part	Description	Count
Application	Job_Fair_Project JOB Fair Project JOB Fair 2.0.0 JOB Fair Project JOB Fair 2.0.1 JOB Fair Project JOB Fair 0.0.1 JOB Fair Project JOB Fair 0.0.2 JOB Fair Project JOB Fair 0.0.3 JOB Fair Project JOB Fair 0.0.4 JOB Fair Project JOB Fair 0.0.5 JOB Fair Project JOB Fair 0.0.6 JOB Fair Project JOB Fair 0.0.7 JOB Fair Project JOB Fair 0.0.8 JOB Fair Project JOB Fair 0.1.0 JOB Fair Project JOB Fair 0.1.1 JOB Fair Project JOB Fair 0.1.2 JOB Fair Project JOB Fair 0.1.3 JOB Fair Project JOB Fair 1.0.0 JOB Fair Project JOB Fair 1.0.1 JOB Fair Project JOB Fair 1.0.2 JOB Fair Project JOB Fair 1.0.3 JOB Fair Project JOB Fair 1.0.4 JOB Fair Project JOB Fair 1.0.5 JOB Fair Project JOB Fair 1.0.6 JOB Fair Project JOB Fair 1.0.7 JOB Fair Project JOB Fair 1.0.8 JOB Fair Project JOB Fair 1.0.9 JOB Fair Project JOB Fair 1.0.10 JOB Fair Project JOB Fair 1.0.11 JOB Fair Project JOB Fair 1.0.12	27

Summary

Vulnerable Configurations

References