Multiple cross-site scripting (XSS) vulnerabilities in the backend user interface in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Multiple cross-site scripting (XSS) vulnerabilities in the backend user interface in TYPO3 3.3.x through
    3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 allow remote attackers to
    inject arbitrary web script or HTML via unspecified fields. (CVE-2009-0816)

Secunia reports :

Some vulnerabilities have been reported in Typo3, which can be exploited by malicious people to conduct cross-site scripting attacks and disclose sensitive information.

Input passed via unspecified fields to the backend user interface is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

An error in the 'jumpUrl' mechanism can be exploited to read arbitrary files from local resources by disclosing a hash secret used to restrict file access.

Several remote vulnerabilities have been discovered in the TYPO3 web content management framework.

Marcus Krause and Michael Stucki from the TYPO3 security team discovered that the jumpUrl mechanism discloses secret hashes enabling a remote attacker to bypass access control by submitting the correct value as a URL parameter and thus being able to read the content of arbitrary files.

Jelmer de Hen and Dmitry Dulepov discovered multiple cross-site scripting vulnerabilities in the backend user interface allowing remote attackers to inject arbitrary web script or HTML.

As it is very likely that your encryption key has been exposed we strongly recommend to change your encryption key via the install tool after installing the update.

ID	Name	Product	Family	Type	Severity
432353	SCA: security update for typo3/cms (GHSA-jg55-3q6h-2ccf)	Tenable Cloud Security	SCA Checks	Local	medium
432353	SCA: security update for typo3/cms (GHSA-jg55-3q6h-2ccf)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
35641	FreeBSD : typo3 -- XSS and information disclosure (cc47fafe-f823-11dd-94d9-0030843d3802)	Nessus	FreeBSD Local Security Checks	Local	medium
35638	Debian DSA-1720-1 : typo3-src - several vulnerabilities	Nessus	Debian Local Security Checks	Local	medium

Detections

Analytics

CVE-2009-0816

medium

Tenable Plugins

medium

medium

medium

medium