PT-2024-40503 · Typo3 · Typo3

Published 2024-05-30 · Updated 2024-05-30

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Typo3 (affected versions not specified)

Description The issue concerns cross-site scripting vulnerabilities in two separate areas. Firstly, the typolink functionality in the website's frontend incorrectly parses values assigned to HTML attributes in link tags, which can be exploited with a valid backend user account. Secondly, in the filelist module of the backend user interface, error messages displayed after attempting to rename a file with a malicious name are not properly encoded, making them vulnerable to cross-site scripting, also requiring a valid backend user account for exploitation.

Recommendations For the typolink functionality issue, consider restricting access to the frontend until a proper fix is applied. For the filelist module issue, as a temporary workaround, consider disabling the file renaming functionality in the backend user interface until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

GHSA-WP8J-C736-C5R3

Affected Products

Typo3

References · 7

• https://osv.dev/vulnerability/GHSA-wp8j-c736-c5r3 · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-07-01-3.yaml · Note
• https://github.com/TYPO3/typo3 · Note
• https://github.com/TYPO3/typo3/commit/7695d91fca1a96a3a3e7466097ae92c32b1130d8 · Note
• https://github.com/TYPO3/typo3/commit/d7feb40c8d277c6b6ab3a548313be1e1a2084299 · Note
• https://typo3.org/security/advisory/typo3-core-sa-2015-004 · Note
• https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-004 · Note