CVE-2010-5101: TYPO3 Directory Traversal Vulnerability in TYPO3 CMS
Summary
CVE-2010-5101: TYPO3 Directory Traversal vulnerability. Affects typo3/cms across 3 version ranges.
>= 4.2.0, < 4.2.16
>= 4.3.0, < 4.3.9
>= 4.4.0, < 4.4.5
Fixed in 4.2.16, 4.3.9 or 4.4.5, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TYPO3 is an open-source content management system (CMS) widely used for building and managing websites. It offers a robust framework for developers and content creators, featuring a flexible architecture, extensive customization options, and a strong community support. However, certain versions of TYPO3 have been found to be vulnerable to directory traversal attacks, which can allow unauthorized access to sensitive files on the server.
Vulnerability Detail
The directory traversal vulnerability in TYPO3 versions 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated administrators to read arbitrary files. This vulnerability arises from insufficient validation of file paths in the TypoScript setup, particularly related to the file inclusion functionality. If exploited, it can lead to unauthorized access to sensitive information, potentially compromising the security of the entire application.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 4.2.0, < 4.2.164.2.16composer require typo3/cms:4.2.16 -
>= 4.3.0, < 4.3.94.3.9composer require typo3/cms:4.3.9 -
>= 4.4.0, < 4.4.54.4.5composer require typo3/cms:4.4.5
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, restrict access to sensitive files and directories on the server level. This can be done by configuring the web server to deny access to certain paths or by using .htaccess files to limit access based on user roles.
Conclusion
The TYPO3 directory traversal vulnerability (CVE-2010-5101) poses a significant risk to installations of affected versions. It is crucial to update to the latest patched versions to mitigate this risk. Additionally, implementing temporary workarounds can help secure your application until an update can be performed.
See every vulnerability recorded for typo3/cms →
FAQ
A directory traversal vulnerability allows an attacker to access files and directories that are stored outside the web root folder. This can lead to unauthorized access to sensitive data.
Check the version of your TYPO3 installation. If it is one of the affected versions (4.2.x < 4.2.16, 4.3.x < 4.3.9, 4.4.x < 4.4.5), it is vulnerable.
Exploiting this vulnerability can lead to unauthorized access to sensitive files, which may contain configuration data, user information, or other critical data, potentially compromising the entire application.
Yes, you can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities in your software. You can check your application against known vulnerabilities using the Vulert playground without any signup.
If an immediate update is not possible, implement server-level restrictions to limit access to sensitive files and monitor your application for any suspicious activity.
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms.
