GHSA-838c-v5cq-hp33

Source

https://github.com/advisories/GHSA-838c-v5cq-hp33

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-838c-v5cq-hp33/GHSA-838c-v5cq-hp33.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-838c-v5cq-hp33

Aliases

CVE-2013-7079

Published

2022-05-17T03:12:49Z

Modified

2023-11-08T03:57:27.767511Z

Summary

TYPO3 OpenID extension Open redirect vulnerability

Details

Open redirect vulnerability in the OpenID extension in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Database specific

{
    "github_reviewed": true,
    "nvd_published_at": "2013-12-23T23:55:00Z",
    "severity": "MODERATE",
    "github_reviewed_at": "2023-08-28T23:45:20Z",
    "cwe_ids": [
        "CWE-20"
    ]
}

References

Affected packages

Packagist / friendsoftypo3/openid

Package

Name: friendsoftypo3/openid
Purl: pkg:composer/friendsoftypo3/openid

Affected ranges

Type: ECOSYSTEM
Events: Introduced

4.5.0

Fixed

4.5.31

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-838c-v5cq-hp33/GHSA-838c-v5cq-hp33.json"

Packagist / friendsoftypo3/openid

Package

Name: friendsoftypo3/openid
Purl: pkg:composer/friendsoftypo3/openid

Affected ranges

Type: ECOSYSTEM
Events: Introduced

4.7.0

Fixed

4.7.16

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-838c-v5cq-hp33/GHSA-838c-v5cq-hp33.json"

Packagist / friendsoftypo3/openid

Package

Name: friendsoftypo3/openid
Purl: pkg:composer/friendsoftypo3/openid

Affected ranges

Type: ECOSYSTEM
Events: Introduced

6.0.0

Fixed

6.0.11

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-838c-v5cq-hp33/GHSA-838c-v5cq-hp33.json"

Packagist / friendsoftypo3/openid

Package

Name: friendsoftypo3/openid
Purl: pkg:composer/friendsoftypo3/openid

Affected ranges

Type: ECOSYSTEM
Events: Introduced

6.1.0

Fixed

6.1.6

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-838c-v5cq-hp33/GHSA-838c-v5cq-hp33.json"