PT-2024-40394 · Typo3 · Typo3
Published
2024-05-30
·
Updated
2024-05-30
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
TYPO3 versions 4.6.x and higher
Description
The issue arises when the configuration option
config.prefixLocalAnchors is used with the values "all" or "cached" in a TYPO3 installation. This can lead to caching of request URLs with arbitrary arguments that point to the home page. As a result, unfamiliar links to the home page may be cached, causing the page to reload in the browser when section links are followed, instead of directly jumping to the requested section.Recommendations
For TYPO3 versions 4.6.x and higher, consider changing the configuration option
config.prefixLocalAnchors to a value other than "all" or "cached" to prevent caching of unfamiliar links to the home page. Additionally, ensure the homepage is not a shortcut to a different page to minimize the impact of this issue. Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Typo3