PT-2020-14182 · Typo3 · Typo3/Cms

Oliver Hader · Published 2020-07-29 · Updated 2024-03-06 · CVE-2020-15098

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TYPO3 CMS versions 9.0.0 through 9.5.19 TYPO3 CMS versions 10.0.0 through 10.4.5

Description A flaw in the internal verification mechanism allows the generation of arbitrary checksums, enabling the injection of arbitrary data with a valid cryptographic message authentication code (HMAC-SHA1). This can lead to various attack chains, including potential privilege escalation, insecure deserialization, and remote code execution. The severity of this issue is high, considering the possible attack chains and the requirement of a valid backend user session.

Recommendations For TYPO3 CMS versions 9.0.0 through 9.5.19, update to version 9.5.20 or later. For TYPO3 CMS versions 10.0.0 through 10.4.5, update to version 10.4.6 or later.

Exploit

Fix

RCE

Information Disclosure

Use of a Broken Cryptographic Algorithm

Deserialization of Untrusted Data

Weakness Enumeration

CWE-325

CWE-200

CWE-327

CWE-502

CWE-20

Related Identifiers

BIT-TYPO3-2020-15098

CVE-2020-15098

GHSA-M5VR-3M74-JWXP

Affected Products

Typo3/Cms

References · 12

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2020-15098.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2020-15098.yaml · Exploit
• https://osv.dev/vulnerability/BIT-typo3-2020-15098 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15098 · Security Note
• https://typo3.org/security/advisory/typo3-core-sa-2016-013 · Vendor Advisory
• https://typo3.org/security/advisory/typo3-core-sa-2020-008 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5091 · Security Note
• https://osv.dev/vulnerability/CVE-2020-15098 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-m5vr-3m74-jwxp · Vendor Advisory
• https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-m5vr-3m74-jwxp · Note
• https://github.com/TYPO3/TYPO3.CMS/commit/85d3e70dff35a99ef53f4b561114acfa9e5c47e1 · Note
• https://github.com/TYPO3/TYPO3.CMS · Note