CVEvulnerability
CVE-2013-1843
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-03-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-399
Description
Open redirect vulnerability in the Access tracking mechanism in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected configurations
• typo3 typo3 4.5
• typo3 typo3 4.5.0
• typo3 typo3 4.5.1
• typo3 typo3 4.5.2
• typo3 typo3 4.5.3
• typo3 typo3 4.5.4
• typo3 typo3 4.5.5
• typo3 typo3 4.5.6
• typo3 typo3 4.5.7
• typo3 typo3 4.5.8
• typo3 typo3 4.5.9
• typo3 typo3 4.5.10
• typo3 typo3 4.5.11
• typo3 typo3 4.5.12
• typo3 typo3 4.5.13
• typo3 typo3 4.5.14
• typo3 typo3 4.5.15
• typo3 typo3 4.5.16
• typo3 typo3 4.5.17
• typo3 typo3 4.5.18
• typo3 typo3 4.5.19
• typo3 typo3 4.5.22
• typo3 typo3 4.5.23
• typo3 typo3 4.6
• typo3 typo3 4.6.0
• typo3 typo3 4.6.1
• typo3 typo3 4.6.2
• typo3 typo3 4.6.3
• typo3 typo3 4.6.4
• typo3 typo3 4.6.5
• typo3 typo3 4.6.6
• typo3 typo3 4.6.7
• typo3 typo3 4.6.8
• typo3 typo3 4.6.9
• typo3 typo3 4.6.10
• typo3 typo3 4.6.11
• typo3 typo3 4.6.12
• typo3 typo3 4.6.13
• typo3 typo3 4.6.14
• typo3 typo3 4.6.15
• typo3 typo3 4.6.16
• typo3 typo3 4.7
• typo3 typo3 4.7.0
• typo3 typo3 4.7.1
• typo3 typo3 4.7.2
• typo3 typo3 4.7.3
• typo3 typo3 4.7.4
• typo3 typo3 4.7.5
• typo3 typo3 4.7.6
• typo3 typo3 4.7.7
• typo3 typo3 4.7.8
• typo3 typo3 6.0
• typo3 typo3 6.0.1
• typo3 typo3 6.0.2
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-updates/2013-03/msg00079.html lists.opensuse.org
- http://secunia.com/advisories/52433 Vendor Advisory
- http://secunia.com/advisories/52638 Vendor Advisory
- http://typo3.org/support/teamssecuritysecurity-bulletins/security-bulletins-single-view/article/sql-injection-and-open-redirection-in-typo3-core/ Vendor Advisory
- http://www.debian.org/security/2013/dsa-2646 www.debian.org
- http://www.openwall.com/lists/oss-security/2013/03/12/3 www.openwall.com
- http://www.osvdb.org/90924 www.osvdb.org
- http://www.securityfocus.com/bid/58330 www.securityfocus.com
- http://lists.opensuse.org/opensuse-updates/2013-03/msg00079.html lists.opensuse.org
- http://secunia.com/advisories/52433 Vendor Advisory
- http://secunia.com/advisories/52638 Vendor Advisory
- http://typo3.org/support/teamssecuritysecurity-bulletins/security-bulletins-single-view/article/sql-injection-and-open-redirection-in-typo3-core/ Vendor Advisory
- http://www.debian.org/security/2013/dsa-2646 www.debian.org
- http://www.openwall.com/lists/oss-security/2013/03/12/3 www.openwall.com
- http://www.osvdb.org/90924 www.osvdb.org
- http://www.securityfocus.com/bid/58330 www.securityfocus.com