GHSA-x428-565f-8xj2
Suggest an improvement- Source
- https://github.com/advisories/GHSA-x428-565f-8xj2
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-x428-565f-8xj2/GHSA-x428-565f-8xj2.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-x428-565f-8xj2
- Published
- 2024-05-30T18:27:24Z
- Modified
- 2024-12-06T05:39:47Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- TYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend API
- Details
-
Backend API configuration using Page TSconfig is vulnerable to arbitrary code execution and cross-site scripting. TSconfig fields of page properties in backend forms can be used to inject malicious sequences. Field tsconfig_includes is vulnerable to directory traversal leading to same scenarios as having direct access to TSconfig settings.
A valid backend user account having access to modify values for fields
pages.TSconfigandpages.tsconfig_includesis needed in order to exploit this vulnerability. - Database specific
{ "cwe_ids": [ "CWE-22", "CWE-79" ], "github_reviewed": true, "github_reviewed_at": "2024-05-30T18:27:24Z", "nvd_published_at": null, "severity": "HIGH" }- References
-
- https://github.com/TYPO3-CMS/core/commit/3a99a0877de6ad9cb39ba73146292b90e13294db
- https://github.com/TYPO3-CMS/core/commit/822e62ec267fbe3c70a26f1c4f73f47fc615c930
- https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-06-25-4.yaml
- https://github.com/TYPO3-CMS/core
- https://typo3.org/security/advisory/typo3-core-sa-2019-019
Affected packages
Packagist / typo3/cms-core
Package
- Name
- typo3/cms-core
- Purl
- pkg:composer/typo3/cms-core
Packagist / typo3/cms-core
Package
- Name
- typo3/cms-core
- Purl
- pkg:composer/typo3/cms-core