TYPO3 Exception Handler XSS Vulnerability
Summary
CVE-2012-2112: Typo3 Exception Handler XSS. Affects typo3/cms across 3 version ranges.
>= 4.4, < 4.4.15
>= 4.5, < 4.5.15
>= 4.6, < 4.6.8
Fixed in 4.4.15, 4.5.15 or 4.6.8, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
TYPO3 is an open-source content management system (CMS) written in PHP. It is widely used for building websites and web applications. The Exception Handler in TYPO3 is responsible for handling and displaying error messages when exceptions occur. However, a cross-site scripting (XSS) vulnerability has been discovered in the Exception Handler in TYPO3 versions 4.4.x to 4.7. This vulnerability allows remote attackers to inject arbitrary web script or HTML via exception messages.
Vulnerability Detail
The XSS vulnerability in TYPO3's Exception Handler arises due to insufficient input sanitization of exception messages. Attackers can exploit this vulnerability by crafting malicious exception messages that contain JavaScript or HTML code. When these messages are displayed to users, the injected code gets executed in their browsers, leading to potential attacks such as session hijacking, defacement, or stealing sensitive information.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 4.4, < 4.4.154.4.15composer require typo3/cms:4.4.15 -
>= 4.5, < 4.5.154.5.15composer require typo3/cms:4.5.15 -
>= 4.6, < 4.6.84.6.8composer require typo3/cms:4.6.8
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
If upgrading immediately is not feasible, users can apply a temporary workaround by disabling the display of exception messages in the TYPO3 configuration. This can be done by modifying the configuration file to set the 'displayErrors' option to '0'. However, this workaround only hides the symptoms of the vulnerability and does not address the underlying issue. It is strongly recommended to upgrade to the patched versions as soon as possible.
Conclusion
The TYPO3 Exception Handler XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via exception messages. To mitigate this vulnerability, TYPO3 users should upgrade to the patched versions as soon as possible. Applying a temporary workaround by disabling the display of exception messages can provide some protection, but upgrading to the latest stable version is strongly recommended. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for typo3/cms →
FAQ
TYPO3 is an open-source content management system (CMS) written in PHP. It is widely used for building websites and web applications.
The Exception Handler in TYPO3 is responsible for handling and displaying error messages when exceptions occur during the execution of the CMS.
Cross-site scripting (XSS) is a type of security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users. This can lead to various attacks, such as session hijacking, defacement, or stealing sensitive information.
The TYPO3 XSS vulnerability can be exploited by crafting malicious exception messages that contain JavaScript or HTML code. When these messages are displayed to users, the injected code gets executed in their browsers.
The potential consequences of the TYPO3 XSS vulnerability include session hijacking, defacement of websites, and theft of sensitive information.
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
