CVE-2013-7073: The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6....

Security readout for executives and security teams

Older TYPO3 installations allowed logged-in editor users to read TYPO3 database table columns they should not have permission to view. This is an information disclosure issue, not described as remote unauthenticated compromise. Business urgency depends on whether affected TYPO3 versions remain in use and what sensitive data editors could access. Exposure is most likely on legacy TYPO3 sites that still run the listed versions and grant backend editor accounts to staff, contractors, or compromised users. Modern or fully patched TYPO3 deployments are less likely exposed, but the bundle does not identify fixed versions directly. Treat this as a targeted data-exposure risk for legacy TYPO3 environments. Prioritize if old TYPO3 versions remain public-facing or if editor accounts are externally accessible. It is not supported here as an actively exploited emergency. Mitigation focus: Inventory TYPO3 installations and identify versions in the affected ranges.; Follow TYPO3-CORE-SA-2013-004 and distro advisories for supported security updates.; Restrict editor accounts to users with a current business need..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.