PT-2024-25814 · Typo3 · Typo3

Torben Hansen · Published 2024-05-14 · Updated 2025-09-03 · CVE-2024-34357

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions TYPO3 versions 9.0.0 through 9.5.47 ELTS TYPO3 versions 10.0.0 through 10.4.44 ELTS TYPO3 versions 11.0.0 through 11.5.36 LTS TYPO3 versions 12.0.0 through 12.4.14 LTS TYPO3 versions 13.0.0 through 13.0.0

Description The issue arises from failing to properly encode user-controlled values in file entities, making the ShowImageController (eID tx cms showpic) vulnerable to cross-site scripting. Exploiting this requires a valid backend user account with access to file entities.

Recommendations Update to TYPO3 version 9.5.48 ELTS Update to TYPO3 version 10.4.45 ELTS Update to TYPO3 version 11.5.37 LTS Update to TYPO3 version 12.4.15 LTS Update to TYPO3 version 13.1.1

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-34357

GHSA-HW6C-6GWQ-3M3M

Affected Products

Typo3

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/34xxx/CVE-2024-34357.json · Exploit
• https://github.com/TYPO3/typo3/commit/376474904f6b9a54dc1b785a2e45277cbd13b0d7 · Patch
• https://github.com/TYPO3/typo3/commit/b31d05d1da3eeaeead2d19eb43b1c3f9c88e15ee · Patch
• https://github.com/TYPO3/typo3/commit/d774642381354d3bf5095a5a26e18acd2767f0b1 · Patch
• https://github.com/TYPO3/typo3/security/advisories/GHSA-hw6c-6gwq-3m3m · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hw6c-6gwq-3m3m · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-34357 · Security Note
• https://typo3.org/security/advisory/typo3-core-sa-2024-009 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-34357 · Vendor Advisory
• https://github.com/TYPO3/typo3 · Note
• https://t.me/cveNotify/134218 · Telegram Post