PT-2024-40384 · Typo3 Cms · Typo3/Cms

Published 2024-05-30 · Updated 2024-05-30

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions TYPO3 CMS (affected versions not specified)

Description The issue arises from the improper validation of the HTTP host-header in TYPO3 CMS, making it susceptible to host spoofing. The HTTP host-header is used by TYPO3 to generate absolute URLs in various instances, such as 404 handling, HTTP(S) enforcement, and password reset links. Since the host header is client-provided, it can be forged to any value, posing a risk even in name-based virtual hosts environments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

GHSA-MXJF-HC9V-XGV2

Affected Products

Typo3/Cms

References · 9

• https://osv.dev/vulnerability/GHSA-mxjf-hc9v-xgv2 · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2014-05-22-1.yaml · Note
• https://github.com/TYPO3/typo3 · Note
• https://github.com/TYPO3/typo3/commit/c39bca9613c311dd12e61771dd311b1bb2283b8d · Note
• https://github.com/TYPO3/typo3/commit/9bd777649e4022c89dbf39ca41988a594b5e94b8 · Note
• https://github.com/TYPO3/typo3/commit/32efb1b03573d51391126c90cd87c74b3dc457fb · Note
• https://github.com/TYPO3/typo3/commit/d554ac5323f3b0fac1fce4c2c491d0123badd669 · Note
• https://web.archive.org/web/20140531042943/http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-001 · Note
• https://typo3.org/security/advisory/typo3-core-sa-2014-001 · Note