PT-2015-4254 · Typo3 · Typo3

Published 2015-01-04 · Updated 2022-05-17 · CVE-2014-9509

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TYPO3 versions 4.5.x through 4.5.38 TYPO3 versions 4.6.x through 6.2.x before 6.2.9 TYPO3 versions 7.x before 7.0.2

Description The issue allows remote attackers to have an unspecified impact, possibly resource consumption, via a "Cache Poisoning" attack using a URL with arbitrary arguments, which triggers a reload of the page. This occurs when the config.prefixLocalAnchors option is set to "all" or "cached". The impact includes unfamiliar looking links to the home page ending up in the cache, leading to a reload of the page in the browser when section links are followed, instead of directly jumping to the requested section.

Recommendations For TYPO3 versions 4.5.x through 4.5.38, remove the configuration options config.prefixLocalAnchors (and optionally also config.baseUrl) in favor of config.absRefPrefix. For TYPO3 versions 4.6.x through 6.2.x before 6.2.9, remove the configuration options config.prefixLocalAnchors (and optionally also config.baseUrl) in favor of config.absRefPrefix, considering that the homepage is not a shortcut to a different page. For TYPO3 versions 7.x before 7.0.2, remove the configuration options config.prefixLocalAnchors (and optionally also config.baseUrl) in favor of config.absRefPrefix.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-9509

GHSA-5479-GQQR-F9GJ

Affected Products

Typo3

References · 4

• 🔥 http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-003 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-9509 · Security Note
• https://osv.dev/vulnerability/GHSA-5479-gqqr-f9gj · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9509 · Note