CVE-2024-34357
published 2024-05-14CVE-2024-34357: TYPO3 is an enterprise content management system. Starting in version 9.0.0 and prior to versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS, and…
PriorityP428medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.50%
39.1th percentile
TYPO3 is an enterprise content management system. Starting in version 9.0.0 and prior to versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS, and 13.1.1, failing to properly encode user-controlled values in file entities, the `ShowImageController` (`_eID tx_cms_showpic_`) is vulnerable to cross-site scripting. Exploiting this vulnerability requires a valid backend user account with access to file entities. TYPO3 versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS, 13.1.1 fix the problem described.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| typo3 | cms-core | >= 10.0.0 < 10.4.45 | 10.4.45 |
| typo3 | cms-core | >= 11.0.0 < 11.5.37 | 11.5.37 |
| typo3 | cms-core | >= 12.0.0 < 12.4.15 | 12.4.15 |
| typo3 | cms-core | >= 13.0.0 < 13.1.1 | 13.1.1 |
| typo3 | cms-core | >= 9.0.0 < 9.5.48 | 9.5.48 |
| typo3 | typo3 | — | — |
| typo3 | typo3 | — | — |
| typo3 | typo3 | — | — |
| typo3 | typo3 | — | — |
| typo3 | typo3 | — | — |
| typo3 | typo3 | >= 10.0.0 < 10.4.45 | 10.4.45 |
| typo3 | typo3 | >= 11.0.0 < 11.5.37 | 11.5.37 |
| typo3 | typo3 | >= 12.0.0 < 12.4.15 | 12.4.15 |
| typo3 | typo3 | >= 13.0.0 < 13.1.1 | 13.1.1 |
| typo3 | typo3 | >= 9.0.0 < 9.5.48 | 9.5.48 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController
osv·2024-05-14
CVE-2024-34357 [MEDIUM] TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController
TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController
### Problem
Failing to properly encode user-controlled values in file entities, the `ShowImageController` (_eID tx_cms_showpic_) is vulnerable to cross-site scripting. Exploiting this vulnerability requires a valid backend user account with access to file entities.
### Solution
Update to TYPO3 versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS, 13.1.1 that fix the problem described.
### Credits
Thanks to TYPO3 security team member Torben Hansen who reported this issue and to TYPO3 core & security team member Oliver Hader who fixed the issue.
### References
* [TYPO3-CORE-SA-2024-009](https://typo3.org/security/advisory/typo3-core-sa-2024-009)
GHSA
TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController
ghsa·2024-05-14
CVE-2024-34357 [MEDIUM] CWE-79 TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController
TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController
### Problem
Failing to properly encode user-controlled values in file entities, the `ShowImageController` (_eID tx_cms_showpic_) is vulnerable to cross-site scripting. Exploiting this vulnerability requires a valid backend user account with access to file entities.
### Solution
Update to TYPO3 versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS, 13.1.1 that fix the problem described.
### Credits
Thanks to TYPO3 security team member Torben Hansen who reported this issue and to TYPO3 core & security team member Oliver Hader who fixed the issue.
### References
* [TYPO3-CORE-SA-2024-009](https://typo3.org/security/advisory/typo3-core-sa-2024-009)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/TYPO3/typo3/commit/376474904f6b9a54dc1b785a2e45277cbd13b0d7https://github.com/TYPO3/typo3/commit/b31d05d1da3eeaeead2d19eb43b1c3f9c88e15eehttps://github.com/TYPO3/typo3/commit/d774642381354d3bf5095a5a26e18acd2767f0b1https://github.com/TYPO3/typo3/security/advisories/GHSA-hw6c-6gwq-3m3mhttps://typo3.org/security/advisory/typo3-core-sa-2024-009https://github.com/TYPO3/typo3/commit/376474904f6b9a54dc1b785a2e45277cbd13b0d7https://github.com/TYPO3/typo3/commit/b31d05d1da3eeaeead2d19eb43b1c3f9c88e15eehttps://github.com/TYPO3/typo3/commit/d774642381354d3bf5095a5a26e18acd2767f0b1https://github.com/TYPO3/typo3/security/advisories/GHSA-hw6c-6gwq-3m3mhttps://typo3.org/security/advisory/typo3-core-sa-2024-009
2024-05-14
Published