GitHub Advisoryadvisory · Packagist
GHSA-f777-f784-36gm TYPO3 Security Misconfiguration in Install Tool Cookie
HIGH
Official page ↗
- Ecosystem
- Packagist
- Packages
- typo3/cms
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-1004
- Reviewed
- 2024-06-07
Affected packages
• Packagist typo3/cms: >= 7.0.0, < 7.6.32 → fixed in 7.6.32
• Packagist typo3/cms: >= 8.0.0, < 8.7.21 → fixed in 8.7.21
• Packagist typo3/cms: >= 9.0.0, < 9.5.2 → fixed in 9.5.2
Description
It has been discovered that cookies created in the Install Tool are not hardened to be submitted only via HTTP. In combination with other vulnerabilities such as cross-site scripting it can lead to hijacking an active and valid session in the Install Tool.
Related
Weakness · CWE (1)
- CWE-1004 Sensitive Cookie Without 'HttpOnly' Flag weakness
References
- https://github.com/TYPO3/typo3/commit/13328b0f74ac589a20b021db814dfa672581c26a web
- https://github.com/TYPO3/typo3/commit/918e50e4d20d88c7e40ad3bb134267d07706b0b1 web
- https://github.com/TYPO3/typo3/commit/a5359491e3fb3164a6ba96a66c8e67fbb9971a4c web
- https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-12-11-4.yaml web
- https://github.com/TYPO3/typo3 package
- https://typo3.org/security/advisory/typo3-core-sa-2018-009 web