Log in Start free

Vulnerability · Published May 14, 2024 · Assigned by GitHub_M

CVE-2024-34358TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController

Medium 5.3

In plain English

A medium-severity information exposure in typo3 from TYPO3. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.5%top 59.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

TYPO3 is an enterprise content management system. Starting in version 9.0.0 and prior to versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS, and 13.1.1, the `ShowImageController` (`_eID tx_cms_showpic_`) lacks a cryptographic HMAC-signature on the `frame` HTTP query parameter (e.g. `/index.php?eID=tx_cms_showpic?file=3&...&frame=12345`). This allows adversaries to instruct the system to produce an arbitrary number of thumbnail images on the server side. TYPO3 versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS, 13.1.1 fix the problem described.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Packagisttypo3/cms-core9.5.48GHSA-36g8-62qv-5957
Packagisttypo3/cms-core10.4.45GHSA-36g8-62qv-5957
Packagisttypo3/cms-core11.5.37GHSA-36g8-62qv-5957
Packagisttypo3/cms-core12.4.15GHSA-36g8-62qv-5957
Packagisttypo3/cms-core13.1.1GHSA-36g8-62qv-5957

Affected products (as reported)

VendorProductVersions
TYPO3 typo3 >= 9.0.0, < 9.5.48>= 10.0.0, < 10.4.45>= 11.0.0, < 11.5.37>= 12.0.0, < 12.4.15>= 13.0.0, < 13.1.1

Weakness: CWE-347, CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References