PT-2022-20484 · Typo3 · Typo3

Lina Wolf · Published 2022-06-14 · Updated 2024-03-06 · CVE-2022-31046

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 7.6.57 ELTS TYPO3 versions prior to 8.7.47 ELTS TYPO3 versions prior to 9.5.34 ELTS TYPO3 versions prior to 10.4.29 TYPO3 versions prior to 11.5.11

Description The export functionality in TYPO3 fails to limit the result set to allowed columns of a particular database table, allowing authenticated users to export internal details of database tables they already have access to.

Recommendations For versions prior to 7.6.57 ELTS, update to version 7.6.57 ELTS or later. For versions prior to 8.7.47 ELTS, update to version 8.7.47 ELTS or later. For versions prior to 9.5.34 ELTS, update to version 9.5.34 ELTS or later. For versions prior to 10.4.29, update to version 10.4.29 or later. For versions prior to 11.5.11, update to version 11.5.11 or later. As a temporary workaround, consider denying access to the export functionality for regular backend users by setting the options.impexp.enableExportForNonAdminUser to 0 in the User TSconfig.

Exploit

Fix

Information Disclosure

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-200

CWE-319

Related Identifiers

BIT-TYPO3-2022-31046

CVE-2022-31046

GHSA-8GMV-9HWG-W89G

Affected Products

Typo3

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31046.json · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-31046.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-31046.yaml · Exploit
• https://github.com/TYPO3/typo3/commit/7447a3d1283017d2ee08737a7972c720001a93e9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-31046 · Security Note
• https://typo3.org/security/advisory/typo3-core-sa-2022-001 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-typo3-2022-31046 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-31046 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8gmv-9hwg-w89g · Vendor Advisory
• https://github.com/TYPO3/typo3/security/advisories/GHSA-8gmv-9hwg-w89g · Note
• https://github.com/TYPO3-CMS/core · Note
• https://t.me/cibsecurity/44455 · Telegram Post