PT-2010-5628 · Typo3 · Typo3

Gregor Kopf · Published 1970-01-01 · Updated 2022-05-17 · CVE-2010-3714

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions TYPO3 versions 4.2.x through 4.2.14 TYPO3 versions 4.3.x through 4.3.6 TYPO3 versions 4.4.x through 4.4.3

Description The issue is related to the jumpUrl implementation in tslib/class.tslib fe.php, which does not properly compare certain hash values during access-control decisions. This allows remote attackers to read arbitrary files via unspecified vectors. The vulnerability can be exploited remotely and may lead to a breach of confidentiality of protected information.

Recommendations For TYPO3 versions 4.2.x through 4.2.14, update to version 4.2.15 or later. For TYPO3 versions 4.3.x through 4.3.6, update to version 4.3.7 or later. For TYPO3 versions 4.4.x through 4.4.3, update to version 4.4.4 or later.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-264

CWE-284

Related Identifiers

BDU:2015-01425

BDU:2015-02085

CVE-2010-3714

DSA-2121-1

GHSA-W736-QV86-VQ94

Affected Products

Typo3

References · 21

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/typo3_sa_2010_020.rb · Exploit
• 🔥 http://exploit-db.com/exploits/15856 · Exploit
• 🔥 https://exploit-db.com/exploits/15856 · Exploit
• https://osv.dev/vulnerability/GHSA-w736-qv86-vq94 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01425 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3716 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3717 · Security Note
• http://debian.org/security/2010/dsa-2121 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-3714 · Security Note
• http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-020 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02085 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3715 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3714 · Security Note
• https://github.com/TYPO3/typo3 · Note
• https://github.com/TYPO3/typo3/commit/a8ccd387cafd2c2c338fc29109c16418f7657229 · Note