CVE-2020-11065: TYPO3 CMS Cross-Site Scripting Vulnerability
Summary
CVE-2020-11065: In TYPO3 CMS greater than or equal to 9.5.12 and less than 9.5.17, and greater than or equal to 10.2.0 and less than 10.4.2, it has been discovered that link tags generated by typolink functionality are vulnerable to cro... Affects typo3 across 2 version ranges.
>= 9.5.12, < 9.5.17
>= 10.2.0, < 10.4.2
Fixed in 9.5.17 or 10.4.2, depending on the release line you run. How to fix ↓
Also tracked for
- typo3/cms-core · Packagist
The same CVE-2020-11065 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TYPO3 CMS is an open-source content management system used for building and managing websites. It provides a range of features and functionality to create dynamic and interactive web applications. However, versions 9.5.12 to 9.5.17 and 10.2.0 to 10.4.2 of TYPO3 CMS are susceptible to a cross-site scripting (XSS) vulnerability. This vulnerability arises from the incorrect parsing of HTML attributes in link tags generated by the typolink functionality.
Vulnerability Detail
The cross-site scripting vulnerability in TYPO3 CMS allows an attacker to inject malicious code into the generated link tags. This can lead to various security risks, including unauthorized access, data theft, and potential compromise of user accounts. The vulnerability originates from the improper handling of properties assigned as HTML attributes, which allows the injection of arbitrary JavaScript code. The impact of this vulnerability can be significant, as it enables attackers to execute malicious actions within the context of the affected TYPO3 CMS instance.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 9.5.12, < 9.5.179.5.17 -
>= 10.2.0, < 10.4.210.4.2
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, developers can manually sanitize and validate user input before generating link tags using the typolink functionality. This involves implementing proper input validation and output encoding to prevent the execution of malicious code. Here is an example of how to sanitize user input in PHP:
$input = $_GET['input'];
$sanitizedInput = htmlspecialchars($input, ENT_QUOTES, 'UTF-8');
Conclusion
The cross-site scripting vulnerability in TYPO3 CMS versions 9.5.12 to 9.5.17 and 10.2.0 to 10.4.2 can have severe security implications, allowing attackers to inject and execute malicious code within the affected CMS instance. It is crucial to update TYPO3 CMS to the latest version and implement proper input validation and output encoding to mitigate the risk of XSS attacks. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for typo3 →
FAQ
TYPO3 CMS is an open-source content management system used for building and managing websites. It provides a range of features and functionality to create dynamic and interactive web applications.
Cross-site scripting (XSS) is a security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users. This can lead to various security risks, including unauthorized access, data theft, and potential compromise of user accounts.
The TYPO3 CMS XSS vulnerability occurs due to the incorrect parsing of HTML attributes in link tags generated by the typolink functionality. This allows attackers to inject arbitrary JavaScript code, which can be executed within the context of the affected TYPO3 CMS instance.
The TYPO3 CMS XSS vulnerability can lead to unauthorized access, data theft, and potential compromise of user accounts. Attackers can execute malicious actions within the context of the affected TYPO3 CMS instance, potentially impacting the security and integrity of the website or application.
To protect your TYPO3 CMS instance from this vulnerability, it is recommended to update to the latest version (9.5.17 or 10.4.2) that includes the necessary patches. Additionally, implementing proper input validation and output encoding when generating link tags using the typolink functionality can help mitigate the risk of XSS attacks.
References
Related vulnerabilities
Recent vulnerabilities recorded for typo3.
