CVE-2012-6146: Typo3 Backend History Module Vulnerable to XSS
Summary
CVE-2012-6146: Typo3 Backend History Module Vulnerable to XSS. Affects typo3/cms across 3 version ranges.
>= 4.5, < 4.5.21
>= 4.6, < 4.6.14
>= 4.7, < 4.7.6
Fixed in 4.5.21, 4.6.14 or 4.7.6, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TYPO3 is an open-source content management system (CMS) written in PHP. It is widely used for building websites and web applications. The Backend History Module in TYPO3 versions 4.5.x, 4.6.x, and 4.7.x allows administrators to view the history of records in the TYPO3 backend. However, a vulnerability in this module allows remote authenticated editors to read the history of arbitrary records by exploiting a cross-site scripting (XSS) vulnerability.
Vulnerability Detail
The TYPO3 Backend History Module does not properly restrict access, allowing remote authenticated editors to read the history of arbitrary records by crafting a malicious URL. This vulnerability can be exploited by injecting malicious scripts into the URL, which will be executed when the history is viewed by an administrator. The impact of this vulnerability is that an attacker can gain unauthorized access to sensitive information, potentially leading to further attacks or data breaches.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 4.5, < 4.5.214.5.21composer require typo3/cms:4.5.21 -
>= 4.6, < 4.6.144.6.14composer require typo3/cms:4.6.14 -
>= 4.7, < 4.7.64.7.6composer require typo3/cms:4.7.6
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to upgrade to the fixed versions as soon as possible.
Conclusion
The TYPO3 Backend History Module is vulnerable to cross-site scripting (XSS) attacks, allowing remote authenticated editors to read the history of arbitrary records. TYPO3 users should upgrade to the fixed versions (4.5.21, 4.6.14, or 4.7.6) to mitigate this vulnerability. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for typo3/cms →
FAQ
TYPO3 is an open-source content management system (CMS) written in PHP. It is widely used for building websites and web applications.
The Backend History Module is a feature in TYPO3 that allows administrators to view the history of records in the TYPO3 backend. It provides a log of changes made to records over time.
Cross-site scripting (XSS) is a type of security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users. This can lead to unauthorized access, data theft, or other malicious activities.
This vulnerability can be exploited by remote authenticated editors who have access to the TYPO3 backend. They can craft a malicious URL that injects malicious scripts into the Backend History Module, which will be executed when the history is viewed by an administrator.
The impact of this vulnerability is that an attacker can gain unauthorized access to sensitive information, potentially leading to further attacks or data breaches.
References
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms.
