CVE-2024-55892: TYPO3 CMS Core Open Redirect Vulnerability
Summary
CVE-2024-55892: TYPO3 Potential Open Redirect via Parsing Differences. Affects typo3/cms-core across 5 version ranges.
>= 9.0.0, < 9.5.49
>= 10.0.0, < 10.4.48
>= 11.0.0, < 11.5.42
>= 12.0.0, < 12.4.25
>= 13.0.0, < 13.4.3
Fixed in 5 releases; the minimum fixed version depends on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TYPO3 is an open-source content management system (CMS) widely used for building and managing websites. It offers a robust framework for developers and a user-friendly interface for content editors. TYPO3 is known for its flexibility, scalability, and extensive features, making it a popular choice for businesses and organizations. However, like any software, it can be susceptible to vulnerabilities, such as the open redirect issue identified in CVE-2024-55892.
Vulnerability Detail
The vulnerability arises from the way TYPO3's CMS Core handles URL parsing through the 'TYPO3\CMS\Core\Http\Uri' class. When applications parse externally provided URLs, they may inadvertently allow open redirect or server-side request forgery (SSRF) attacks if the URLs are used after passing validation checks. This could lead to unauthorized redirection of users to malicious sites or internal resources, posing significant security risks.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 9.0.0, < 9.5.499.5.49composer require typo3/cms-core:9.5.49 -
>= 10.0.0, < 10.4.4810.4.48composer require typo3/cms-core:10.4.48 -
>= 11.0.0, < 11.5.4211.5.42composer require typo3/cms-core:11.5.42 -
>= 12.0.0, < 12.4.2512.4.25composer require typo3/cms-core:12.4.25 -
>= 13.0.0, < 13.4.313.4.3composer require typo3/cms-core:13.4.3
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, ensure that any externally provided URLs are strictly validated and sanitized before use. Implement additional checks to prevent unauthorized redirects.
Conclusion
CVE-2024-55892 highlights a critical vulnerability in TYPO3 CMS Core that can lead to open redirects and SSRF attacks. It is essential for users to update to the latest patched versions to mitigate these risks and ensure the security of their applications.
See every vulnerability recorded for typo3/cms-core →
FAQ
CVE-2024-55892 is a vulnerability in TYPO3 CMS Core that allows for potential open redirects or SSRF attacks due to improper URL parsing.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which monitors open-source vulnerabilities without requiring signup.
The risks include unauthorized redirection of users to malicious sites, which can lead to phishing attacks, data theft, or exploitation of internal resources.
You can update TYPO3 using Composer by running the command 'composer require typo3/cms-core:^9.5.49' or the appropriate version based on your current installation.
The issue was reported by Sam Mush and fixed by TYPO3 core & security team member Benjamin Franzke.
References
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms-core.
