TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism
High severity
GitHub Reviewed
Published
May 17, 2022
to the GitHub Advisory Database
•
Updated Feb 7, 2024
Package
Affected versions
>= 4.2.0, < 4.2.15
>= 4.3.0, < 4.3.7
>= 4.4.0, < 4.4.4
Patched versions
4.2.15
4.3.7
4.4.4
Description
Published by the National Vulnerability Database
Oct 25, 2010
Published to the GitHub Advisory Database
May 17, 2022
Reviewed
Feb 7, 2024
Last updated
Feb 7, 2024
The jumpUrl (aka access tracking) implementation in
tslib/class.tslib_fe.phpin TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers to read arbitrary files via unspecified vectors.References