TYPO3 Brute Force Protection Bypass in backend login
Summary
GHSA-jqr8-q455-xx45: TYPO3 Brute Force Protection Bypass in backend login. Affects typo3/cms across 2 version ranges.
>= 6.2.0, < 6.2.14
>= 7.0.0, < 7.3.1
Fixed in 6.2.14 or 7.3.1, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TYPO3 CMS is an open-source content management system used for building websites and web applications. It provides a backend interface for administrators and editors to manage content and configure the system. The backend login functionality is responsible for authenticating users and granting access to the backend interface. However, a vulnerability exists in the implementation of the brute force protection mechanism in the backend login.
Vulnerability Detail
The backend login in TYPO3 CMS has a basic brute force protection implementation that introduces a 5-second pause if incorrect credentials are provided. This pause is intended to deter brute force attacks by slowing down the authentication process. However, an attacker can bypass this protection by forging a special request, making it easier to launch brute force attacks against backend editor credentials. This vulnerability could allow an attacker to gain unauthorized access to the backend interface and potentially perform malicious actions.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 6.2.0, < 6.2.146.2.14composer require typo3/cms:6.2.14 -
>= 7.0.0, < 7.3.17.3.1composer require typo3/cms:7.3.1
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. However, administrators can enhance the security of their TYPO3 CMS installation by implementing additional security measures such as IP whitelisting, strong passwords, and two-factor authentication. These measures can help mitigate the risk of brute force attacks and unauthorized access.
Conclusion
The TYPO3 CMS backend login vulnerability allows attackers to bypass the brute force protection mechanism and launch brute force attacks on backend editor credentials. To mitigate this vulnerability, it is crucial to update the TYPO3 CMS installation to the fixed versions. Additionally, implementing additional security measures can further enhance the security of the TYPO3 CMS installation. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for typo3/cms →
FAQ
TYPO3 CMS is an open-source content management system used for building websites and web applications. It provides a backend interface for administrators and editors to manage content and configure the system.
This vulnerability allows an attacker to bypass the brute force protection in the backend login of TYPO3 CMS. By launching brute force attacks, an attacker can potentially gain unauthorized access to the backend interface and perform malicious actions.
To fix this vulnerability, update your TYPO3 CMS installation to the latest version. For TYPO3 CMS 6.2.0 to 6.2.13, update to version 6.2.14. For TYPO3 CMS 7.0.0 to 7.3.0, update to version 7.3.1.
While there is no specific workaround for this vulnerability, administrators can enhance the security of their TYPO3 CMS installation by implementing additional security measures such as IP whitelisting, strong passwords, and two-factor authentication.
You can use Vulert Playground (https://vulert.com/scanner) to check if your TYPO3 CMS installation is affected by this vulnerability. Vulert Playground allows you to analyze your composer.lock file and identify any open-source vulnerabilities in your software.
References
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms.
