GitHub Advisoryadvisory · Packagist

GHSA-7gxq-5qqc-v3fc TYPO3 Open redirect vulnerability in the Access tracking mechanism

MEDIUM Published 2022-05-17 Modified 2023-08-28 Official page ↗
Aliases
CVE-2013-1843
Ecosystem
Packagist
Packages
typo3/cms-core
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-601
Reviewed
2023-08-28

Affected packages

• Packagist typo3/cms-core: >= 4.5.0, < 4.5.24 → fixed in 4.5.24 • Packagist typo3/cms-core: >= 4.6.0, < 4.6.17 → fixed in 4.6.17 • Packagist typo3/cms-core: >= 4.7.0, < 4.7.9 → fixed in 4.7.9 • Packagist typo3/cms-core: >= 6.0.0, < 6.0.3 → fixed in 6.0.3

Description

Open redirect vulnerability in the Access tracking mechanism in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2013-1843 Open redirect vulnerability in the Access tracking mechanism in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and… vulnerability

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References