TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 it has been discovered that Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. No authentication is required in order to exploit this vulnerability. This is fixed in versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1.
References
| Link | Resource |
|---|---|
| https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp | Third Party Advisory |
| https://packagist.org/packages/typo3/cms-core | Release Notes Third Party Advisory |
| https://typo3.org/security/advisory/typo3-core-sa-2021-001 | Vendor Advisory |
| https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp | Third Party Advisory |
| https://packagist.org/packages/typo3/cms-core | Release Notes Third Party Advisory |
| https://typo3.org/security/advisory/typo3-core-sa-2021-001 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 05:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp - Third Party Advisory | |
| References | () https://packagist.org/packages/typo3/cms-core - Release Notes, Third Party Advisory | |
| References | () https://typo3.org/security/advisory/typo3-core-sa-2021-001 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : 5.8
v3 : 4.7 |
Information
Published : 2021-03-23 02:15
Updated : 2024-11-21 05:48
NVD link : CVE-2021-21338
Mitre link : CVE-2021-21338
CVE.ORG link : CVE-2021-21338
JSON object : View
Products Affected
typo3
- typo3
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')