CVE-2024-25120

low-risk
Published 2024-02-13

TYPO3 is an open source PHP based web content management system released under the GNU GPL. The TYPO3-specific `t3://` URI scheme could be used to access resources outside of the users' permission scope. This encompassed files, folders, pages, and records (although only if a valid link-handling configuration was provided). Exploiting this vulnerability requires a valid backend user account. Users are advised to update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described. There are no known workarounds for this issue.

Do I need to act?

-
0.19% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.3/10 Medium
NETWORK / LOW complexity

Affected Products (2)

Affected Vendors

Typo3

References (6)

Third Party Advisory https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolin...
Third Party Advisory https://github.com/TYPO3/typo3/security/advisories/GHSA-wf85-8hx9-gj7c
Vendor Advisory https://typo3.org/security/advisory/typo3-core-sa-2024-005
Third Party Advisory https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolin...
Third Party Advisory https://github.com/TYPO3/typo3/security/advisories/GHSA-wf85-8hx9-gj7c
Vendor Advisory https://typo3.org/security/advisory/typo3-core-sa-2024-005
26
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 1/34 · Minimal
Exposure 7/34 · Low