GitHub Advisoryadvisory · Packagist

GHSA-vpw5-grxx-v396 CSRF token exposure in TYPO3 extension

MEDIUM Published 2021-09-02 Modified 2022-07-13 Official page ↗
Aliases
CVE-2021-36793
Ecosystem
Packagist
Packages
lms/routes
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C
Weaknesses
CWE-668
Reviewed
2021-08-30

Affected packages

• Packagist lms/routes: < 2.1.1 → fixed in 2.1.1

Description

When using the CsrfTokenViewHelper the extension discloses the user's session identifier to HTML output without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - like for instance Cross Site Scripting in the frontend output.

Related

Alias · CVE (1)

  • CVE-2021-36793 The routes (aka Extbase Yaml Routes) extension before 2.1.1 for TYPO3, when CsrfTokenViewHelper is used, allows Sensitive Information… vulnerability

Weakness · CWE (1)

  • CWE-668 Exposure of Resource to Wrong Sphere weakness

References