CVE-2009-3629: TYPO3 Backend vulnerable to Cross-site Scripting
Summary
CVE-2009-3629: TYPO3 Backend vulnerable to Cross-site Scripting. Affects typo3/cms-backend across 4 version ranges.
< 4.0.13
>= 4.1.0, < 4.1.13
>= 4.2.0, < 4.2.10
>= 4.3alpha1, < 4.3beta2
Fixed in 4 releases; the minimum fixed version depends on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TYPO3 is an open-source content management system (CMS) written in PHP. It provides a backend interface for managing website content and configurations. The TYPO3 Backend package is responsible for the administration and management of the CMS. It allows authenticated users to perform various tasks such as creating and editing content, managing user permissions, and configuring the system. However, versions 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 of TYPO3 Backend are vulnerable to multiple cross-site scripting (XSS) attacks.
Vulnerability Detail
The vulnerability allows remote authenticated users to inject arbitrary web script or HTML into the TYPO3 Backend. This can be exploited by attackers to execute malicious code in the context of other authenticated users or to steal sensitive information such as session cookies. The exact vectors of the attack are unspecified, but they likely involve user input fields or parameters that are not properly sanitized or validated. The impact of this vulnerability can range from defacement of the website to the compromise of user accounts and the exposure of sensitive data.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 4.0.134.0.13composer require typo3/cms-backend:4.0.13 -
>= 4.1.0, < 4.1.134.1.13composer require typo3/cms-backend:4.1.13 -
>= 4.2.0, < 4.2.104.2.10composer require typo3/cms-backend:4.2.10 -
>= 4.3alpha1, < 4.3beta24.3beta2composer require typo3/cms-backend:4.3beta2
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, users can disable or restrict access to the TYPO3 Backend for untrusted or unknown users. This can be done by modifying the system configuration or using access control mechanisms provided by the CMS. However, this workaround may limit the functionality and usability of the TYPO3 Backend for legitimate users.
Conclusion
The vulnerability in TYPO3 Backend allows authenticated users to inject arbitrary web script or HTML, potentially leading to XSS attacks and the compromise of user accounts or sensitive information. It is crucial for TYPO3 users to upgrade to the latest version of TYPO3 Backend that includes the necessary security patches. Additionally, developers should ensure proper input validation and sanitization to prevent XSS vulnerabilities in their applications. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for typo3/cms-backend →
FAQ
TYPO3 Backend is the administrative interface of the TYPO3 content management system. It allows users to manage website content, configure the system, and perform various administrative tasks.
The vulnerability in TYPO3 Backend allows authenticated users to inject malicious code into the system, potentially leading to the compromise of user accounts, defacement of the website, or the theft of sensitive information.
No, only versions 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 of TYPO3 Backend are affected by this vulnerability. Users of other versions are not impacted.
TYPO3 provides detailed documentation on how to upgrade the CMS and its extensions. Users should follow the upgrade instructions provided by TYPO3 to ensure they have the latest version with the necessary security patches.
As a temporary workaround, users can restrict access to the TYPO3 Backend for untrusted or unknown users. However, this may limit the functionality and usability of the backend for legitimate users.
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms-backend.
