Skip to content
OpenAdvisories
Medium WID-SEC-2024-0357 7 CVEs

TYPO3 Core und TYPO3 Extension: Mehrere Schwachstellen

Published Feb 12, 2024 · Updated Feb 12, 2024 · de-DE

Vendor: TYPO3 Product: Core Product: Extension Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in TYPO3 Core und TYPO3 Extension ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.

Product

TYPO3 ist ein freies Content-Management-System, basierend auf der Scriptsprache PHP und einer SQL-Datenbank. Über zahlreiche Extensions kann der Funktionsumfang der Core-Installation individuell erweitert werden.

Vulnerabilities 7

  • High 7.2
    CVE-2024-22188

    TYPO3 Install Tool vulnerable to Code Execution

    TYPO3 before 13.0.1 allows an authenticated admin user (with system maintainer privileges) to execute arbitrary shell commands (with the privileges of the web server) via a command injection vulnerability in form fields of the Install Tool. The fixed versions…

    typo3/cms-core Packagist
  • High 7.1
    CVE-2024-25121

    Improper Access Control Persisting File Abstraction Layer Entities via Data Handler in TYPO3

    TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions of TYPO3 entities of the File Abstraction Layer (FAL) could be persisted directly via `DataHandler`. This allowed attackers to reference files in …

    TYPO3 typo3 typo3/cms-core Web / CMS Packagist
  • Medium 5.5
    CVE-2023-30451

    Path Traversal in TYPO3 File Abstraction Layer Storages

    In TYPO3 11.5.24, the filelist component allows attackers (who have access to the administrator panel) to read arbitrary files via directory traversal in the baseuri field, as demonstrated by POST /typo3/record/edit with ../../../ in data[sys_file_storage]*[d…

    typo3/cms-core Packagist
  • Medium 4.9
    CVE-2024-25119

    Information Disclosure of Encryption Key in TYPO3 Install Tool

    TYPO3 is an open source PHP based web content management system released under the GNU GPL. The plaintext value of `$GLOBALS['SYS']['encryptionKey']` was displayed in the editing forms of the TYPO3 Install Tool user interface. This allowed attackers to utiliz…

    TYPO3 typo3 typo3/cms-core Web / CMS Packagist
  • Medium 4.3
    CVE-2024-24751

    Broken Access Control in Backend Module in sf_event_mgt

    sf_event_mgt is an event management and registration extension for the TYPO3 CMS based on ExtBase and Fluid. In affected versions the existing access control check for events in the backend module got broken during the update of the extension to TYPO3 12.4, b…

    derhansen sf_event_mgt derhansen/sf_event_mgt Packagist
  • Medium 4.3
    CVE-2024-25118

    Information Disclosure of Hashed Passwords in TYPO3 Backend Forms

    TYPO3 is an open source PHP based web content management system released under the GNU GPL. Password hashes were being reflected in the editing forms of the TYPO3 backend user interface. This allowed attackers to crack the plaintext password using brute force…

    TYPO3 typo3 typo3/cms-core Web / CMS Packagist
  • Medium 4.3
    CVE-2024-25120

    Improper Access Control of Resources Referenced by t3:// URI Scheme in TYPO3

    TYPO3 is an open source PHP based web content management system released under the GNU GPL. The TYPO3-specific `t3://` URI scheme could be used to access resources outside of the users' permission scope. This encompassed files, folders, pages, and records (al…

    TYPO3 typo3 typo3/cms-core Web / CMS Packagist

Revision history

  1. #1

    Initiale Fassung

References