Command Execution via Metacharacter Injection in TYPO3 Indexed Search Engine
Summary
CVE-2009-0258: Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection. Affects typo3/cms across 3 version ranges.
>= 4.0.0, < 4.0.10
>= 4.1.0, < 4.1.8
>= 4.2.0, < 4.2.4
Fixed in 4.0.10, 4.1.8 or 4.2.4, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
TYPO3 is an open-source content management system (CMS) used for building and managing websites. The Indexed Search Engine is a system extension in TYPO3 that provides search functionality for websites. It allows users to search for content within the TYPO3 CMS. However, a vulnerability has been discovered in versions 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 of TYPO3, which can be exploited by remote attackers to execute arbitrary commands.
Vulnerability Detail
The vulnerability in the Indexed Search Engine arises from a lack of proper handling of shell metacharacters in filenames. When a crafted filename containing shell metacharacters is processed by the command-line indexer, it can lead to command execution. This means that an attacker can manipulate the filename in such a way that arbitrary commands are executed on the server hosting the TYPO3 CMS. The impact of this vulnerability can be severe, as it allows an attacker to gain unauthorized access to the server and potentially compromise the entire system.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 4.0.0, < 4.0.104.0.10composer require typo3/cms:4.0.10 -
>= 4.1.0, < 4.1.84.1.8composer require typo3/cms:4.1.8 -
>= 4.2.0, < 4.2.44.2.4composer require typo3/cms:4.2.4
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
If upgrading to the patched versions is not immediately possible, users can apply a workaround to mitigate the risk. The workaround involves disabling the Indexed Search Engine extension until the CMS can be upgraded. This can be done by accessing the TYPO3 backend, navigating to the Extension Manager, and deactivating the indexed_search extension.
Conclusion
The vulnerability in the TYPO3 Indexed Search Engine can be exploited by remote attackers to execute arbitrary commands on the server. It is crucial for TYPO3 users to upgrade to the patched versions or apply the workaround to mitigate the risk. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for typo3/cms →
FAQ
TYPO3 is an open-source content management system (CMS) used for building and managing websites. It provides a flexible and extensible platform for creating and maintaining web content.
The Indexed Search Engine is a system extension in TYPO3 that provides search functionality for websites. It allows users to search for content within the TYPO3 CMS.
The vulnerability arises from a lack of proper handling of shell metacharacters in filenames. When a crafted filename containing shell metacharacters is processed by the command-line indexer, it can lead to command execution.
The impact of this vulnerability can be severe, as it allows an attacker to execute arbitrary commands on the server hosting the TYPO3 CMS. This can lead to unauthorized access and potential compromise of the entire system.
To fix this vulnerability, TYPO3 users should upgrade to the patched versions of the CMS. Alternatively, a workaround is available which involves disabling the Indexed Search Engine extension until the CMS can be upgraded.
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
