CVE-2021-21338

Source
https://cve.org/CVERecord?id=CVE-2021-21338
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-21338.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-21338
Aliases
Published
2021-03-23T02:15:12Z
Modified
2026-08-27T03:49:03Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 it has been discovered that Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. No authentication is required in order to exploit this vulnerability. This is fixed in versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1.

Database specific
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "6.2.0"
                },
                {
                    "fixed": "6.2.57"
                },
                {
                    "introduced": "6.2.0"
                },
                {
                    "fixed": "6.2.57"
                },
                {
                    "introduced": "6.2.0"
                },
                {
                    "fixed": "6.2.57"
                },
                {
                    "introduced": "7.0.0"
                },
                {
                    "fixed": "7.6.51"
                },
                {
                    "introduced": "7.0.0"
                },
                {
                    "fixed": "7.6.51"
                },
                {
                    "introduced": "7.0.0"
                },
                {
                    "fixed": "7.6.51"
                },
                {
                    "introduced": "8.0.0"
                },
                {
                    "fixed": "8.7.40"
                },
                {
                    "introduced": "8.0.0"
                },
                {
                    "fixed": "8.7.40"
                },
                {
                    "introduced": "8.0.0"
                },
                {
                    "fixed": "8.7.40"
                }
            ],
            "source": "CPE_RANGE",
            "vendor_product": "typo3:typo3"
        }
    ]
}
References

Affected packages

Git / github.com/TYPO3/typo3

Affected ranges

Type
GIT
Repo
https://github.com/TYPO3/typo3
Events
Database specific
Show details
{
    "cpe": "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "9.0.0"
        },
        {
            "fixed": "9.5.25"
        },
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.4.14"
        },
        {
            "introduced": "11.0.0"
        },
        {
            "fixed": "11.1.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v10.*
v10.0.0
v10.1.0
v10.2.0
v10.3.0
v10.4.0
v10.4.1
v10.4.10
v10.4.11
v10.4.12
v10.4.13
v10.4.2
v10.4.3
v10.4.4
v10.4.5
v10.4.6
v10.4.7
v10.4.8
v10.4.9
v11.*
v11.0.0
v11.1.0
v9.*
v9.0.0
v9.1.0
v9.2.0
v9.3.0
v9.4.0
v9.5.0
v9.5.1
v9.5.10
v9.5.11
v9.5.12
v9.5.13
v9.5.14
v9.5.15
v9.5.16
v9.5.17
v9.5.18
v9.5.19
v9.5.2
v9.5.20
v9.5.21
v9.5.22
v9.5.23
v9.5.24
v9.5.3
v9.5.4
v9.5.5
v9.5.6
v9.5.7
v9.5.8
v9.5.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-21338.json"

Git / github.com/typo3/typo3

Affected ranges

Type
GIT
Repo
https://github.com/typo3/typo3
Events
Database specific
Show details
{
    "cpe": "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "9.0.0"
        },
        {
            "fixed": "9.5.25"
        },
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.4.14"
        },
        {
            "introduced": "11.0.0"
        },
        {
            "fixed": "11.1.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v10.*
v10.0.0
v10.1.0
v10.2.0
v10.3.0
v10.4.0
v10.4.1
v10.4.10
v10.4.11
v10.4.12
v10.4.13
v10.4.2
v10.4.3
v10.4.4
v10.4.5
v10.4.6
v10.4.7
v10.4.8
v10.4.9
v11.*
v11.0.0
v11.1.0
v9.*
v9.0.0
v9.1.0
v9.2.0
v9.3.0
v9.4.0
v9.5.0
v9.5.1
v9.5.10
v9.5.11
v9.5.12
v9.5.13
v9.5.14
v9.5.15
v9.5.16
v9.5.17
v9.5.18
v9.5.19
v9.5.2
v9.5.20
v9.5.21
v9.5.22
v9.5.23
v9.5.24
v9.5.3
v9.5.4
v9.5.5
v9.5.6
v9.5.7
v9.5.8
v9.5.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-21338.json"