{ "schema_version": "1.4.0", "id": "GHSA-w2vx-3562-3fwg", "modified": "2025-04-11T03:40:39Z", "published": "2022-05-17T05:47:13Z", "aliases": [ "CVE-2010-3717" ], "details": "The t3lib_div::validEmail function in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly restrict input to filter_var FILTER_VALIDATE_EMAIL operations in PHP, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string, a related issue to CVE-2010-3710.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3717" }, { "type": "WEB", "url": "http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-020" }, { "type": "WEB", "url": "http://www.debian.org/security/2010/dsa-2121" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/43786" } ], "database_specific": { "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2010-10-25T20:01:00Z" } }