CVE-2011-4901 on Ubuntu 12.04 LTS (precise) - medium.
Description:
Using "getText" feature on headlines of content elements it is possible to retrieve arbitrary data from TYPO3 database. The vulnerability results from an insecure configuration in css_styled_content system extension.