GitHub Advisoryadvisory · Packagist

GHSA-h47m-3f78-qp9g TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key

MEDIUM Published 2024-02-13 Modified 2024-02-14 Official page ↗
Aliases
CVE-2024-25119
Ecosystem
Packagist
Packages
typo3/cms-core
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-200
Reviewed
2024-02-13

Affected packages

• Packagist typo3/cms-core: >= 8.0.0, < 8.7.57 → fixed in 8.7.57 • Packagist typo3/cms-core: >= 9.0.0, < 9.5.46 → fixed in 9.5.46 • Packagist typo3/cms-core: >= 10.0.0, < 10.4.43 → fixed in 10.4.43 • Packagist typo3/cms-core: >= 11.0.0, < 11.5.35 → fixed in 11.5.35 • Packagist typo3/cms-core: >= 12.0.0, < 12.4.11 → fixed in 12.4.11 • Packagist typo3/cms-core: >= 13.0.0, < 13.0.1 → fixed in 13.0.1

Description

Problem The plaintext value of `$GLOBALS['SYS']['encryptionKey']` was displayed in the editing forms of the TYPO3 Install Tool user interface. This allowed attackers to utilize the value to generate cryptographic hashes used for verifying the authenticity of HTTP request parameters. Exploiting this vulnerability requires an administrator-level backend user account with system maintainer permissions. Solution Update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described. Credits Thanks to TYPO3 core & security team member Benjamin Franzke who fixed the issue. References • TYPO3-CORE-SA-2024-004

Related

Alias · CVE (1)

  • CVE-2024-25119 TYPO3 is an open source PHP based web content management system released under the GNU GPL. vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References