PT-2022-16033 · Typo3 · Typo3

Daniel Schönfeld · Published 2022-12-13 · Updated 2024-03-06 · CVE-2022-23500

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 9.5.38 TYPO3 versions prior to 10.4.33 TYPO3 versions prior to 11.5.20 TYPO3 versions prior to 12.1.1

Description Requesting invalid or non-existing resources via HTTP triggers the page error handler, which retrieves content to be shown as an error message from another page, leading to a scenario where the application calls itself recursively. This amplifies the impact of the initial attack until the limits of the web server are exceeded.

Recommendations Update to version 9.5.38 ELTS or later Update to version 10.4.33 or later Update to version 11.5.20 or later Update to version 12.1.1 or later

Exploit

Fix

Uncontrolled Recursion

Weakness Enumeration

CWE-674

CWE-405

Related Identifiers

BIT-TYPO3-2022-23500

CVE-2022-23500

GHSA-8C28-5MP7-V24H

Affected Products

Typo3

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23500.json · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23500.yaml · Exploit
• https://osv.dev/vulnerability/BIT-typo3-2022-23500 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23500 · Security Note
• https://osv.dev/vulnerability/CVE-2022-23500 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8c28-5mp7-v24h · Vendor Advisory
• https://github.com/TYPO3/typo3 · Note
• https://github.com/TYPO3/typo3/commit/1e5f44417f031c9c5a9f9d09a6a841cf89aa7b7a · Note
• https://github.com/TYPO3/typo3/commit/73b46b6a627093112cfca4b895a198ca5e1970b7 · Note
• https://github.com/TYPO3/typo3/security/advisories/GHSA-8c28-5mp7-v24h · Note
• https://typo3.org/security/advisory/typo3-core-sa-2022-012 · Note
• https://t.me/cvenotify/39834 · Telegram Post