GitHub Advisoryadvisory · Packagist

GHSA-838c-v5cq-hp33 TYPO3 OpenID extension Open redirect vulnerability

MEDIUM Published 2022-05-17 Modified 2023-08-28 Official page ↗
Aliases
CVE-2013-7079
Ecosystem
Packagist
Packages
friendsoftypo3/openid
Severity
Moderate
Weaknesses
CWE-20
Reviewed
2023-08-28

Affected packages

• Packagist friendsoftypo3/openid: >= 4.5.0, < 4.5.31 → fixed in 4.5.31 • Packagist friendsoftypo3/openid: >= 4.7.0, < 4.7.16 → fixed in 4.7.16 • Packagist friendsoftypo3/openid: >= 6.0.0, < 6.0.11 → fixed in 6.0.11 • Packagist friendsoftypo3/openid: >= 6.1.0, < 6.1.6 → fixed in 6.1.6

Description

Open redirect vulnerability in the OpenID extension in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2013-7079 Open redirect vulnerability in the OpenID extension in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References