TYPO3 Denial of Service in Frontend Record Registration
Summary
GHSA-hjx5-v9xg-7h25: TYPO3 Denial of Service in Frontend Record Registration. Affects typo3/cms-core across 2 version ranges.
>= 7.0.0, < 7.6.32
>= 8.0.0, < 8.7.21
Fixed in 7.6.32 or 8.7.21, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TYPO3 is an open-source content management system (CMS) that allows users to create and manage websites. It provides various functionalities, including a built-in record registration feature, also known as a basic shopping cart. This feature allows users to add items to a cart and proceed with the registration process. However, this functionality is vulnerable to a denial of service attack. The vulnerability arises from the failure to validate anonymous user sessions properly. Exploiting this vulnerability, attackers can create an arbitrary number of individual session-data records in the database, leading to resource exhaustion and potential disruption of service.
Vulnerability Detail
The vulnerability in TYPO3's record registration functionality allows attackers to exploit the system by generating a large number of session-data records in the database. By not adequately verifying the validity of anonymous user sessions, the system becomes susceptible to abuse. This can result in resource exhaustion, impacting the performance and availability of the application. The vulnerability has a CVSS score of 7.5, indicating a high severity level.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 7.0.0, < 7.6.327.6.32composer require typo3/cms-core:7.6.32 -
>= 8.0.0, < 8.7.218.7.21composer require typo3/cms-core:8.7.21
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, users can disable the record registration functionality or implement additional access controls to limit the impact of potential attacks. However, it is strongly recommended to apply the official fix by updating to the patched versions mentioned above.
Conclusion
The TYPO3 record registration functionality is vulnerable to a denial of service attack due to inadequate validation of anonymous user sessions. This can result in resource exhaustion and potential disruption of service. Users are advised to update their TYPO3 installations to versions 7.6.32 or 8.7.21 (or later) to mitigate this vulnerability. Additionally, implementing proper access controls and monitoring mechanisms can further enhance the security of TYPO3 installations. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for typo3/cms-core →
FAQ
TYPO3 is an open-source content management system (CMS) used for creating and managing websites.
Record registration in TYPO3 refers to the built-in functionality that allows users to add items to a cart and proceed with the registration process, similar to a basic shopping cart.
A denial of service attack is a malicious act aimed at disrupting the normal functioning of a system or network by overwhelming it with a flood of illegitimate requests or excessive resource consumption.
This vulnerability can lead to resource exhaustion, impacting the performance and availability of the TYPO3 application. It can also potentially enable attackers to manipulate session data and compromise user privacy.
To protect your TYPO3 installation, it is crucial to update to the latest version that includes the fix for this vulnerability. Additionally, implementing proper access controls and monitoring mechanisms can help detect and mitigate potential attacks.
References
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms-core.
