PT-2024-40064 · Unknown · Form Framework

Published 2024-05-30 · Updated 2024-05-30

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Form Framework (system extension "form") (affected versions not specified)

Description The issue arises from the failure to properly separate system-related configuration from user-generated configuration, leading to SQL injection and Privilege Escalation risks. An attacker can persist instructions to a form definition file that were not intended to be modified, affecting both form editor module-managed definitions and those uploaded directly via the file list module. Exploitation requires a valid backend user account and the system extension "form" to be activated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

GHSA-45WJ-JV2H-JWRF

Affected Products

Form Framework

References · 8

• https://osv.dev/vulnerability/GHSA-45wj-jv2h-jwrf · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-07-12-3.yaml · Note
• https://github.com/TYPO3-CMS/core · Note
• https://github.com/TYPO3-CMS/core/commit/5e3ed52854ea8192f1c0e2ef30f434e74ba6d253 · Note
• https://github.com/TYPO3-CMS/core/commit/a0a6271dc8f715b5b6859771333d57925dfb63bc · Note
• https://github.com/TYPO3-CMS/core/commit/e70d7c66110a0919b39bccdfdc73cbfd7f504dfc · Note
• https://github.com/TYPO3-CMS/core/commit/eddc7635fb3447f0fb69831855f4095de8e12350 · Note
• https://typo3.org/security/advisory/typo3-core-sa-2018-003 · Note