CVE-2010-5097: TYPO3 CMS-Frontend Cross-site scripting (XSS) vulnerability in the click enlarge functionality
Summary
CVE-2010-5097: TYPO3 Cross-site scripting (XSS) vulnerability in the click enlarge functionality. Affects typo3/cms-frontend across 2 version ranges.
>= 4.3.0, < 4.3.9
>= 4.4.0, < 4.4.5
Fixed in 4.3.9 or 4.4.5, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TYPO3 CMS-Frontend is a package that provides the frontend functionality for TYPO3, an open-source content management system. It allows users to create and manage websites with ease. The click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5, when the caching framework is enabled, is vulnerable to a cross-site scripting (XSS) attack. This vulnerability allows remote attackers to inject arbitrary web script or HTML into the application via unspecified vectors.
Vulnerability Detail
The cross-site scripting (XSS) vulnerability in the click enlarge functionality of TYPO3 CMS-Frontend arises due to insufficient input validation. Attackers can exploit this vulnerability by injecting malicious script or HTML code into the application, which is then executed in the context of the victim's browser. This can lead to various consequences, including session hijacking, defacement of web pages, theft of sensitive information, and the potential for further attacks.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 4.3.0, < 4.3.94.3.9composer require typo3/cms-frontend:4.3.9 -
>= 4.4.0, < 4.4.54.4.5composer require typo3/cms-frontend:4.4.5
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
If upgrading to the recommended versions is not immediately possible, a temporary workaround is to disable the click enlarge functionality or implement input validation and output encoding to prevent the execution of malicious scripts or HTML. Here is an example of input validation using PHP:
$input = $_GET['param'];
if (!preg_match('/^[a-zA-Z0-9]+$/', $input)) {
// Handle invalid input
}
Conclusion
The cross-site scripting (XSS) vulnerability in TYPO3 CMS-Frontend's click enlarge functionality can have serious consequences if left unaddressed. It is crucial to upgrade to the recommended versions or apply the provided workarounds to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for typo3/cms-frontend →
FAQ
This vulnerability allows remote attackers to inject malicious script or HTML into the application, potentially leading to session hijacking, defacement of web pages, theft of sensitive information, and further attacks.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, using just the composer.lock file.
Yes, patches are available for TYPO3 CMS-Frontend. It is recommended to upgrade to version 4.3.9 if using TYPO3 4.3.x, or to version 4.4.5 if using TYPO3 4.4.x.
Yes, disabling the click enlarge functionality can serve as a temporary workaround to mitigate the risk of this vulnerability.
Implementing input validation and output encoding can help prevent the execution of malicious scripts or HTML. It is recommended to follow secure coding practices and sanitize user input before displaying it.
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms-frontend.
