TYPO3 CMS - Possible Cache Poisoning on Homepage with Anchors
Summary
GHSA-p84g-j2gh-83g3: TYPO3 possible cache poisoning on the homepage when anchors are used. Affects typo3/cms across 2 version ranges.
>= 6.2.0, < 6.2.9
>= 7.0.0, < 7.0.2
Fixed in 6.2.9 or 7.0.2, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
TYPO3 CMS is an open-source content management system that allows users to create and manage websites. It provides a wide range of features and functionalities, making it a popular choice for building complex and dynamic websites. However, a vulnerability has been discovered in TYPO3 CMS that can lead to cache poisoning on the homepage when anchors are used.
Vulnerability Detail
The vulnerability arises when a request URL with arbitrary arguments, still pointing to the home page of a TYPO3 installation, is cached. This can occur if the configuration option 'config.prefixLocalAnchors' is set to 'all' or 'cached'. The impact of this vulnerability is that unfamiliar-looking links to the home page can end up in the cache. As a result, when web page visitors follow section links, the page will be reloaded in the browser instead of directly jumping to the requested section. This can lead to a poor user experience and potential performance issues. The vulnerability affects TYPO3 versions 4.6.x and higher, but only if the homepage is not a shortcut to a different page.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 6.2.0, < 6.2.96.2.9composer require typo3/cms:6.2.9 -
>= 7.0.0, < 7.0.27.0.2composer require typo3/cms:7.0.2
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, users can mitigate the impact by avoiding the use of anchors on the homepage or by setting the 'config.prefixLocalAnchors' option to 'none'. It is important to note that these workarounds may affect the functionality or user experience of the website.
Conclusion
The vulnerability in TYPO3 CMS can lead to cache poisoning on the homepage when anchors are used. It is important for TYPO3 CMS users to update their installations to the recommended versions to fix this vulnerability. Users can also consider the mentioned workarounds to mitigate the impact. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for typo3/cms →
FAQ
TYPO3 CMS is an open-source content management system used for creating and managing websites.
Cache poisoning refers to the situation where incorrect or malicious data is stored in a cache, leading to unexpected behavior or security vulnerabilities.
The vulnerability affects TYPO3 versions 4.6.x and higher, but only if the homepage is not a shortcut to a different page.
To fix this vulnerability, update your TYPO3 CMS installation to the recommended versions mentioned in the 'how_to_fix' section.
While there are no specific workarounds mentioned, you can mitigate the impact by avoiding the use of anchors on the homepage or by changing the 'config.prefixLocalAnchors' option.
References
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
