CVE-2009-0815: TYPO3 CMS Hash Secret Leakage in Error Messages
Summary
CVE-2009-0815: TYPO3 leaks a hash secret in an error message. Affects typo3/cms across 3 version ranges.
>= 3.3, < 4.0.12
>= 4.1, < 4.1.10
>= 4.2, < 4.2.6
Fixed in 4.0.12, 4.1.10 or 4.2.6, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TYPO3 is a popular open-source content management system (CMS) that enables users to create and manage websites efficiently. It is known for its flexibility, scalability, and extensive feature set, making it suitable for various types of web applications. However, certain versions of TYPO3 have been found to contain vulnerabilities that can expose sensitive information, such as hash secrets, through error messages.
Vulnerability Detail
The vulnerability identified as CVE-2009-0815 affects TYPO3 versions 3.3.x through 3.8.x, as well as 4.0 before 4.0.12, 4.1 before 4.1.10, and 4.2 before 4.2.6. It arises from the jumpUrl mechanism in the class.tslib_fe.php file, which inadvertently leaks a hash secret (juHash) in error messages. This leakage allows remote attackers to exploit the information to read arbitrary files on the server, potentially leading to unauthorized access to sensitive data.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 3.3, < 4.0.124.0.12composer require typo3/cms:4.0.12 -
>= 4.1, < 4.1.104.1.10composer require typo3/cms:4.1.10 -
>= 4.2, < 4.2.64.2.6composer require typo3/cms:4.2.6
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, users can disable error messages or implement custom error handling to prevent the leakage of sensitive information until they can apply the necessary updates. This can be done by modifying the TYPO3 configuration to suppress detailed error outputs.
Conclusion
CVE-2009-0815 is a significant vulnerability in TYPO3 that can lead to the exposure of sensitive information through error messages. It is crucial for users to update to the latest patched versions to mitigate the risk. Additionally, utilizing tools like Vulert can help monitor for vulnerabilities in real-time.
See every vulnerability recorded for typo3/cms →
FAQ
CVE-2009-0815 is a vulnerability in TYPO3 that allows the leakage of a hash secret through error messages, potentially enabling remote attackers to read arbitrary files.
The affected versions include TYPO3 3.3.x through 3.8.x, and 4.0 before 4.0.12, 4.1 before 4.1.10, and 4.2 before 4.2.6.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without requiring any signup.
If exploited, this vulnerability can allow attackers to access sensitive files on the server, potentially leading to data breaches and unauthorized access.
If immediate updates are not possible, consider implementing custom error handling to suppress detailed error messages and prevent the leakage of sensitive information.
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms.
