PT-2015-4253 · Typo3 · Typo3
Gernot Leitgab
·
Published
2015-01-04
·
Updated
2022-05-17
·
CVE-2014-9508
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
TYPO3 versions 4.5.x through 4.5.38
TYPO3 versions 4.6.x through 6.2.x before 6.2.9
TYPO3 versions 7.x before 7.0.2
Description
The frontend rendering component in TYPO3 allows remote attackers to change URLs to arbitrary domains for links that only contain anchors, when
config.prefixLocalAnchors is set and using a homepage with such links. This can be achieved by forging a request that modifies these links. The vulnerability is also dependent on URL rewriting being enabled in the web server, which is typically the case when using extensions like realurl or cooluri. However, installations where config.absRefPrefix is set are not affected.Recommendations
For TYPO3 versions 4.5.x through 4.5.38, update to version 4.5.39 or later.
For TYPO3 versions 4.6.x through 6.2.x before 6.2.9, update to version 6.2.9 or later.
For TYPO3 versions 7.x before 7.0.2, update to version 7.0.2 or later.
As a temporary workaround, consider disabling the
config.prefixLocalAnchors option until a patch is available.
Restrict access to the homepage of the TYPO3 installation to minimize the risk of exploitation, especially when URL rewriting is enabled.Exploit
Fix
Link Following
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Typo3