Advisory Database
  • Advisories
  • Dependency Scanning
  1. composer
  2. ›
  3. typo3/neos
  4. ›
  5. neos-sa-2015-001

neos-sa-2015-001: Privilege Escalation

March 28, 2015

It has been discovered that TYPO3 Neos is vulnerable to Privilege Escalation. Logged in editors could access, create and modify content nodes that exist in the workspace of other editors.

References

  • www.neos.io/blog/neos-sa-2015-001.html

Code Behaviors & Features

Detect and mitigate neos-sa-2015-001 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions starting from 1.1.0-beta1 before 1.1.3, all versions starting from 1.2.0-beta1 before 1.2.3

Fixed versions

  • 1.1.3
  • 1.2.3

Solution

Upgrade to versions 1.1.3, 1.2.3 or above.

Source file

packagist/typo3/neos/neos-sa-2015-001.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Wed, 14 May 2025 12:15:58 +0000.