PT-2024-40082 · Typo3 · Typo3
Published
2024-06-05
·
Updated
2024-06-05
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions:
TYPO3 (affected versions not specified)
Description:
The issue concerns insecure deserialization when executing Phar archives. This vulnerability can be exploited when untrusted data is used, allowing abuse of the application's logic. A new interceptor, PharStreamWrapper, was introduced to protect against possible vulnerabilities in 3rd party components. However, it was found that exception and error handlers in custom applications sometimes didn't return to the original operating sequence, leaving the native PHP Phar handling active and vulnerable. Examples show how the handling can be bypassed in custom application code, such as when exception thrown from code organized in a Phar archive or errors converted to exceptions and thrown when interacting with archive contents.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Typo3