TYPO3 is an open source PHP based web content management system released under the GNU GPL. In typo3 installations there are always at least two different sites. Eg. first.example.org and second.example.com. In affected versions a session cookie generated for the first site can be reused on the second site without requiring additional authentication. This vulnerability has been addressed in versions 8.7.55, 9.5.44, 10.4.41, 11.5.33, and 12.4.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - TYPO3 is an open source PHP based web content management system released under the GNU GPL. In typo3
    installations there are always at least two different sites. Eg. first.example.org and second.example.com.
    In affected versions a session cookie generated for the first site can be reused on the second site
    without requiring additional authentication. This vulnerability has been addressed in versions 8.7.55,
    9.5.44, 10.4.41, 11.5.33, and 12.4.8. Users are advised to upgrade. There are no known workarounds for
    this vulnerability. (CVE-2023-47127)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7cc003cb-83b9-11ee-957d-b42e991fc52e advisory.

  - TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected     versions DOM processing instructions are not handled correctly. This allows bypassing the cross-site     scripting mechanism of typo3/html-sanitizer. This vulnerability has been addressed in versions 1.5.3 and     2.1.4. Users are advised to upgrade. There are no known workarounds for this vulnerability.
    (CVE-2023-47125)

  - TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected     versions the login screen of the standalone install tool discloses the full path of the transient data     directory (e.g. /var/www/html/var/transient/). This applies to composer-based scenarios only - classic     non-composer installations are not affected. This issue has been addressed in version 12.4.8. Users are     advised to upgrade. There are no known workarounds for this vulnerability. (CVE-2023-47126)

  - TYPO3 is an open source PHP based web content management system released under the GNU GPL. In typo3     installations there are always at least two different sites. Eg. first.example.org and second.example.com.
    In affected versions a session cookie generated for the first site can be reused on the second site     without requiring additional authentication. This vulnerability has been addressed in versions 8.7.55,     9.5.44, 10.4.41, 11.5.33, and 12.4.8. Users are advised to upgrade. There are no known workarounds for     this vulnerability. (CVE-2023-47127)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of TYPO3 installed on the remote host is prior to 8.0.0 < 8.7.55 ELTS / 9.0.0 < 9.5.44 ELTS / 10.0.0 < 10.4.41 ELTS / 11.0.0 < 11.5.33 / 12.0.0 < 12.4.8. It is, therefore, affected by a vulnerability as referenced in the TYPO3-CORE-SA-2023-006 advisory.

  - Given that there are at least two different sites in the same TYPO3 installation - for instance     first.example.org and second.example.com - then a session cookie generated for the first site can be     reused on the second site without requiring additional authentication. This vulnerability primarily     affects the frontend of the website. It's important to note that exploiting this vulnerability requires a     valid user account. (CVE-2023-47127)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
409705	SCA: security update for typo3/cms-core (GHSA-3vmm-7h4j-69rm)	Tenable Cloud Security	SCA Checks	medium
409705	SCA: security update for typo3/cms-core (GHSA-3vmm-7h4j-69rm)	Tenable Self-Hosted Container Security	SCA Checks	medium
185775	FreeBSD : typo3 -- Multiple vulnerabilities (7cc003cb-83b9-11ee-957d-b42e991fc52e)	Nessus	FreeBSD Local Security Checks	medium
185515	TYPO3 8.0.0 < 8.7.55 ELTS / 9.0.0 < 9.5.44 ELTS / 10.0.0 < 10.4.41 ELTS / 11.0.0 < 11.5.33 / 12.0.0 < 12.4.8 (TYPO3-CORE-SA-2023-006)	Nessus	CGI abuses	medium

Detections

Analytics

CVE-2023-47127

medium

Tenable Plugins

medium

medium

medium

medium