Privilege Escalation & SQL Injection in TYPO3 CMS
Summary
GHSA-7qwg-fcpw-xg5g: Privilege Escalation & SQL Injection in TYPO3 CMS. Affects typo3/cms across 2 version ranges.
>= 8.5.0, < 8.7.17
>= 9.0.0, < 9.3.2
Fixed in 8.7.17 or 9.3.2, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
TYPO3 CMS is an open-source content management system that allows users to create and manage websites. It provides a wide range of features and functionalities, including a Form Framework for creating and managing forms. However, the Form Framework in TYPO3 CMS is vulnerable to privilege escalation and SQL injection attacks. This vulnerability arises from a failure to properly dissociate system-related configuration from user-generated configuration. As a result, malicious instructions can be persisted to a form definition file, allowing an attacker to execute arbitrary SQL queries and escalate their privileges within the system. Exploiting this vulnerability requires a valid backend user account and the activation of the system extension 'form'.
Vulnerability Detail
The vulnerability in TYPO3 CMS's Form Framework allows an attacker to inject malicious SQL queries and escalate their privileges within the system. By persisting unauthorized instructions to a form definition file, an attacker can bypass security measures and gain unauthorized access to sensitive data or perform unauthorized actions. This vulnerability affects TYPO3 CMS versions 8.5.0 to 8.7.17 and versions 9.0.0 to 9.3.2.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 8.5.0, < 8.7.178.7.17composer require typo3/cms:8.7.17 -
>= 9.0.0, < 9.3.29.3.2composer require typo3/cms:9.3.2
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the official patches or upgrade to the latest version of TYPO3 CMS as soon as possible.
Conclusion
The privilege escalation and SQL injection vulnerability in TYPO3 CMS's Form Framework can have severe consequences, including unauthorized access to sensitive data and potential privilege escalation. It is essential for TYPO3 CMS users to update their installations to the latest patched versions or apply the official patches as soon as possible. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for typo3/cms →
FAQ
TYPO3 CMS is an open-source content management system used for creating and managing websites.
The Form Framework is a system extension in TYPO3 CMS that allows users to create and manage forms.
The vulnerability arises from a failure to properly dissociate system-related configuration from user-generated configuration in the Form Framework. This allows an attacker to inject malicious SQL queries and escalate their privileges within the system.
Exploiting this vulnerability can lead to unauthorized access to sensitive data, manipulation of the system, and potential privilege escalation within TYPO3 CMS.
To protect your TYPO3 CMS installation, it is crucial to update to the latest patched version of the software. Regularly checking for updates and applying them promptly is recommended.
References
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
