← Zuruck zu CVEs

CVE-2021-21338

MEDIUM

4.7

Beschreibung

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 it has been discovered that Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. No authentication is required in order to exploit this vulnerability. This is fixed in versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1.

CVE Details

CVSS v3.1 Bewertung4.7

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionREQUIRED

Veroffentlicht3/23/2021

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

typo3:typo3

Schwachen (CWE)

CWE-601

Referenzen

https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp(security-advisories@github.com)

https://packagist.org/packages/typo3/cms-core(security-advisories@github.com)

https://typo3.org/security/advisory/typo3-core-sa-2021-001(security-advisories@github.com)

https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp(af854a3a-2127-422b-91ae-364da2661108)

https://packagist.org/packages/typo3/cms-core(af854a3a-2127-422b-91ae-364da2661108)

https://typo3.org/security/advisory/typo3-core-sa-2021-001(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.