CVE-2024-25118: TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords
Summary
CVE-2024-25118: TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords. Affects typo3/cms-core across 6 version ranges.
>= 8.0.0, < 8.7.57
>= 9.0.0, < 9.5.46
>= 10.0.0, < 10.4.43
>= 11.0.0, < 11.5.35
>= 12.0.0, < 12.4.11
>= 13.0.0, < 13.0.1
Fixed in 6 releases; the minimum fixed version depends on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TYPO3 is an open-source content management system (CMS) written in PHP. It is widely used for building and managing websites, providing a flexible and extensible platform for developers. The TYPO3 backend user interface allows administrators to manage various aspects of the CMS, including user accounts and permissions. However, a vulnerability in the backend forms of TYPO3 allows for the information disclosure of hashed passwords.
Vulnerability Detail
The vulnerability in TYPO3 backend forms allows password hashes to be reflected in the editing forms of the user interface. This means that an attacker with a valid backend user account could potentially obtain the hashed passwords and attempt to crack them using brute force techniques. The impact of this vulnerability is dependent on the strength of the passwords used by backend users. If weak passwords are used, they can be easily cracked, leading to unauthorized access to the TYPO3 backend and potentially compromising the entire CMS.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 8.0.0, < 8.7.578.7.57composer require typo3/cms-core:8.7.57 -
>= 9.0.0, < 9.5.469.5.46composer require typo3/cms-core:9.5.46 -
>= 10.0.0, < 10.4.4310.4.43composer require typo3/cms-core:10.4.43 -
>= 11.0.0, < 11.5.3511.5.35composer require typo3/cms-core:11.5.35 -
>= 12.0.0, < 12.4.1112.4.11composer require typo3/cms-core:12.4.11 -
>= 13.0.0, < 13.0.113.0.1composer require typo3/cms-core:13.0.1
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended solution is to update to the fixed versions of TYPO3.
Conclusion
The vulnerability in TYPO3 backend forms that allows for the information disclosure of hashed passwords can be mitigated by updating to the fixed versions of TYPO3. It is important to ensure that strong passwords are used for backend accounts to minimize the risk of unauthorized access. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for typo3/cms-core →
FAQ
TYPO3 is an open-source content management system (CMS) written in PHP. It is widely used for building and managing websites.
The impact of this vulnerability depends on the strength of the passwords used by backend users. If weak passwords are used, they can be easily cracked, leading to unauthorized access to the TYPO3 backend and potentially compromising the entire CMS.
To fix this vulnerability, it is recommended to update to the latest versions of TYPO3 (8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, or 13.0.1) that include the necessary fixes.
No specific workaround is mentioned for this vulnerability. Updating to the fixed versions of TYPO3 is the recommended solution.
This vulnerability was reported by external security researchers Maximilian Beckmann and Klaus-Günther Schmidt, as well as TYPO3 security team member Oliver Hader.
References
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms-core.
