Summary
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial of Service Zustand herzustellen.
Product
TYPO3 ist ein freies Content-Management-System, basierend auf der Scriptsprache PHP und einer SQL-Datenbank. Über zahlreiche Extensions kann der Funktionsumfang der Core-Installation individuell erweitert werden.
Vulnerabilities 6
-
High 7.5
TYPO3 vulnerable to Arbitrary Code Execution via Form Framework
TYPO3 is an open source PHP based web content management system. Versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and 12.1.1 are vulnerable to Code Injection. Due to the lack of separating user-submitted data from the internal configuration in the Form Des…
-
Medium 6.1
Cross-Site Scripting Protection bypass in HTML Sanitizer
HTML sanitizer is written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values. In versions prior to 1.5.0 or 2.1.1, malicious markup used in a sequence with special HTML CDATA sections cannot be filtered and sanit…
-
Medium 5.9
TYPO3 subject to Uncontrolled Recursion resulting in Denial of Service
TYPO3 is an open source PHP based web content management system. In versions prior to 9.5.38, 10.4.33, 11.5.20, and 12.1.1, requesting invalid or non-existing resources via HTTP triggers the page error handler, which again could retrieve content to be shown a…
-
Medium 5.9
TYPO3 vulnerable to Improper Authentication in Frontend Login
TYPO3 is an open source PHP based web content management system. In versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and 12.1.1 TYPO3 is vulnerable to Improper Authentication. Restricting frontend login to specific users, organized in different storage fol…
-
Medium 5.7
TYPO3 contains Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
TYPO3 is an open source PHP based web content management system. Versions prior to 9.5.38, 10.4.33, 11.5.20, and 12.1.1 are subject to Sensitive Information Disclosure. Due to the lack of handling user-submitted YAML placeholder expressions in the site config…
-
Medium 5.4
TYPO3 contains Insufficient Session Expiration after Password Reset
TYPO3 is an open source PHP based web content management system. In versions prior to 10.4.33, 11.5.20, and 12.1.1, When users reset their password using the corresponding password recovery functionality, existing sessions for that particular user account wer…
Revision history
-
#1
Initiale Fassung
References
-
TYPO3 Security Advisory vom 2022-12-12
https://typo3.org/security/advisory/typo3-core-sa-2022-017
-
TYPO3 Security Advisory vom 2022-12-12
https://typo3.org/security/advisory/typo3-core-sa-2022-016
-
TYPO3 Security Advisory vom 2022-12-12
https://typo3.org/security/advisory/typo3-core-sa-2022-015
-
TYPO3 Security Advisory vom 2022-12-12
https://typo3.org/security/advisory/typo3-core-sa-2022-014
-
TYPO3 Security Advisory vom 2022-12-12
https://typo3.org/security/advisory/typo3-core-sa-2022-013
-
TYPO3 Security Advisory vom 2022-12-12
https://typo3.org/security/advisory/typo3-core-sa-2022-012
-
TYPO3 12.1.1, 11.5.20 and 10.4.33 security releases published vom 2022-12-12
https://typo3.org/article/typo3-1211-11520-and-10433-security-releases-published