Vulnerability · Published Jul 25, 2023 · Assigned by GitHub_M

CVE-2023-38499typo3/cms-core Information Disclosure due to Out-of-scope Site Resolution

Low 3.7

In plain English

A low-severity information exposure in typo3 from TYPO3. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)3.7Low

Exploit odds (30 days)1.1%top 35.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

TYPO3 is an open source PHP based web content management system. Starting in version 9.4.0 and prior to versions 9.5.42 ELTS, 10.4.39 ELTS, 11.5.30, and 12.4.4, in multi-site scenarios, enumerating the HTTP query parameters `id` and `L` allowed out-of-scope access to rendered content in the website frontend. For instance, this allowed visitors to access content of an internal site by adding handcrafted query parameters to the URL of a site that was publicly available. TYPO3 versions 9.5.42 ELTS, 10.4.39 ELTS, 11.5.30, 12.4.4 fix the problem.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Packagist	typo3/cms-core	9.5.42	GHSA-jq6g-4v5m-wm9r
Packagist	typo3/cms-core	10.4.39	GHSA-jq6g-4v5m-wm9r
Packagist	typo3/cms-core	11.5.30	GHSA-jq6g-4v5m-wm9r
Packagist	typo3/cms-core	12.4.4	GHSA-jq6g-4v5m-wm9r

Affected products (as reported)

Vendor	Product	Versions
TYPO3	typo3	>= 9.4.0, < 9.5.42>= 10.0.0, < 10.4.39>= 11.0.0, < 11.5.30>= 12.0.0, < 12.4.4

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

References

https://github.com/TYPO3/typo3/security/advisories/GHSA-jq6g-4v5m-wm9r x_refsource_CONFIRM
https://github.com/TYPO3/typo3/commit/702e2debd4b28f9cdb540544565fe6a8627ccb6a x_refsource_MISC
https://typo3.org/security/advisory/typo3-core-sa-2023-003 x_refsource_MISC