PT-2021-23098 · Typo3 · Typo3

Benjamin Franzke · Published 2021-10-05 · Updated 2024-03-06 · CVE-2021-41114

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to the fix of the regression introduced during TYPO3 v11 development

Description The issue is related to host spoofing due to improper validation of the HTTP Host header. TYPO3 uses this header to generate absolute URLs, but since it is provided by the client, it can be forged. A regression during TYPO3 v11 development led to this vulnerability, as the existing setting $GLOBALS['TYPO3 CONF VARS']['SYS']['trustedHostsPattern'] was not evaluated anymore.

Recommendations For versions prior to the fix of the regression introduced during TYPO3 v11 development, ensure the setting $GLOBALS['TYPO3 CONF VARS']['SYS']['trustedHostsPattern'] is properly evaluated to mitigate the host spoofing issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-644

CWE-20

Related Identifiers

BIT-TYPO3-2021-41114

CVE-2021-41114

GHSA-M2JH-FXW4-GPHM

Affected Products

Typo3

References · 13

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-41114.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-41114.yaml · Exploit
• https://github.com/TYPO3/typo3/commit/5cbff85506cebe343e5ae59228977547cf8e3cf4 · Patch
• https://typo3.org/security/advisory/typo3-core-sa-2021-015 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-m2jh-fxw4-gphm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41114 · Security Note
• https://osv.dev/vulnerability/BIT-typo3-2021-41114 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-3941 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41114 · Vendor Advisory
• https://github.com/TYPO3/typo3 · Note
• https://github.com/TYPO3/typo3/security/advisories/GHSA-m2jh-fxw4-gphm · Note
• https://t.me/cvenotify/21944 · Telegram Post
• https://t.me/cibsecurity/30003 · Telegram Post