GitHub Advisoryadvisory · Packagist

GHSA-pmxp-7224-h794 Denial of Service (DoS) attack possibility in TYPO3 component Indexed Search

MEDIUM Published 2024-06-04 Modified 2024-06-04 Official page ↗

Ecosystem: Packagist
Packages: typo3/cms
Severity: Moderate
Weaknesses: CWE-400
Reviewed: 2024-06-04

Affected packages

• Packagist typo3/cms: >= 6.2.0, < 6.2.19 → fixed in 6.2.19 • Packagist typo3/cms: >= 7.6.0, < 7.6.4 → fixed in 7.6.4

Description

Due to an oversized maximum result limit, TYPO3 component Indexed Search is susceptible to a Denial of Service attack.

Related

Weakness · CWE (1)

CWE-400 Uncontrolled Resource Consumption weakness

References