GitHub Advisoryadvisory · Packagist

GHSA-w736-qv86-vq94 TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism

HIGH Published 2022-05-17 Modified 2024-02-07 Official page ↗
Aliases
CVE-2010-3714
Ecosystem
Packagist
Packages
typo3/cms
Severity
High
Weaknesses
CWE-284
Reviewed
2024-02-07

Affected packages

• Packagist typo3/cms: >= 4.2.0, < 4.2.15 → fixed in 4.2.15 • Packagist typo3/cms: >= 4.3.0, < 4.3.7 → fixed in 4.3.7 • Packagist typo3/cms: >= 4.4.0, < 4.4.4 → fixed in 4.4.4

Description

The jumpUrl (aka access tracking) implementation in `tslib/class.tslib_fe.php` in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers to read arbitrary files via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2010-3714 The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x… vulnerability

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References