CVE-2005-4875: TYPO3 CMS Sensitive Information Disclosure via Direct Request
Summary
CVE-2005-4875: TYPO3 Reveals Sensitive Information via Direct Request to misc/phpcheck/. Affects typo3/cms versions < 3.8.1. Fixed in 3.8.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TYPO3 is an open-source content management system (CMS) used for building and managing websites. It is known for its flexibility, scalability, and extensive features that cater to various web development needs. However, TYPO3 versions 3.8.0 and earlier are vulnerable to a security issue that allows unauthorized access to sensitive information through direct requests to specific PHP scripts.
Vulnerability Detail
The vulnerability arises from TYPO3's handling of requests to the 'misc/phpcheck/' directory, which inadvertently exposes sensitive information by invoking the phpinfo function. This function displays detailed information about the PHP environment, including server variables and configuration settings. Attackers can exploit this vulnerability to gain insights into the server's environment, potentially leading to further attacks or data breaches.
How To Fix
Minimum fixed version
3.8.1
This is the first release that contains the fix.
composer require typo3/cms:3.8.1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, it is advisable to restrict access to the 'misc/phpcheck/' directory through server configuration settings, such as .htaccess rules or web server configurations, to prevent unauthorized access until the package can be updated.
Conclusion
The CVE-2005-4875 vulnerability in TYPO3 poses a significant risk by allowing unauthorized access to sensitive information. It is crucial for users of TYPO3 versions 3.8.0 and earlier to update to version 3.8.1 or later to secure their installations. Implementing temporary workarounds can help mitigate risks until an update is performed.
See every vulnerability recorded for typo3/cms →
FAQ
CVE-2005-4875 is a vulnerability in TYPO3 that allows remote attackers to access sensitive information via direct requests to the 'misc/phpcheck/' directory.
TYPO3 versions 3.8.0 and earlier are affected by this vulnerability.
The vulnerability can expose sensitive server environment information, including PHP configuration settings and server variables.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If an immediate update is not possible, implement access restrictions to the 'misc/phpcheck/' directory to mitigate the risk of exposure.
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms.
