CVE-2014-3942

MEDIUM · CVSS 6 EPSS 1.63%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-06-03 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2014-3942

Severity

MEDIUM

CVSS

EPSS

1.63%

Original Filing — NVD Description

The Color Picker Wizard component in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, and 6.1.0 before 6.1.9 allows remote authenticated editors to execute arbitrary PHP code via a serialized PHP object.