PT-2024-40430 · Typo3 Cms · Typo3/Cms

Published 2024-06-04 · Updated 2024-06-04

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions TYPO3 CMS (affected versions not specified)

Description The issue affects all XML processing within the TYPO3 CMS, making it vulnerable to XML External Entity (XXE) processing. This allows an attacker to load internal and/or external file content within an XML structure. Additionally, it is possible to inject arbitrary files, which can lead to an XML Denial of Service attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-QFFC-GWPP-M2XR

Affected Products

Typo3/Cms

References · 3

• https://osv.dev/vulnerability/GHSA-qffc-gwpp-m2xr · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2016-02-23-1.yaml · Note
• https://typo3.org/security/advisory/typo3-core-sa-2016-005 · Note