CVE-2021-21338

Source
https://nvd.nist.gov/vuln/detail/CVE-2021-21338
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-21338.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-21338
Aliases
Published
2021-03-23T02:15:12Z
Modified
2024-06-06T13:25:06.982467Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 it has been discovered that Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. No authentication is required in order to exploit this vulnerability. This is fixed in versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1.

References

Affected packages

Git / github.com/typo3/typo3.cms

Affected ranges

Type
GIT
Repo
https://github.com/typo3/typo3.cms
Events

Affected versions

v11.*

v11.0.0
v11.1.0