CVE-2014-3941: TYPO3

Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days.

TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allows remote attackers to have unspecified impact via a crafted HTTP Host header, related to "Host Spoofing."

Affected products

• TYPO3 TYPO3: version 4.7.0 only; version 4.7.1 only; version 4.7.2 only; version 4.7.3 only; version 4.7.4 only; version 4.7.5 only; …

Published 2014-06-03. Last modified 2026-06-17.