GitHub Advisoryadvisory · Packagist
GHSA-g585-crjf-vhwq TYPO3 Denial of Service in Frontend Record Registration
HIGH
Official page ↗
- Ecosystem
- Packagist
- Packages
- typo3/cms
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-770
- Reviewed
- 2024-06-07
Affected packages
• Packagist typo3/cms: >= 7.0.0, < 7.6.32 → fixed in 7.6.32
• Packagist typo3/cms: >= 8.0.0, < 8.7.21 → fixed in 8.7.21
Description
TYPO3’s built-in record registration functionality (aka `basic shopping cart`) using recs URL parameters is vulnerable to denial of service. Failing to properly ensure that anonymous user sessions are valid, attackers can use this vulnerability in order to create an arbitrary amount of individual session-data records in the database.
Related
Weakness · CWE (1)
- CWE-770 Allocation of Resources Without Limits or Throttling weakness
References
- https://github.com/TYPO3/typo3/commit/05011d1248c54d00960e344fd920a6246da92415 web
- https://github.com/TYPO3/typo3/commit/fc2b4b9fb978088267f83e73cd401d4371dd40e3 web
- https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-12-11-7.yaml web
- https://github.com/TYPO3/typo3 package
- https://typo3.org/security/advisory/typo3-core-sa-2018-012 web