Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-17971
HistoryOct 10, 2021 - 12:00 a.m.

TYPO3 cross-site request forgery vulnerability

2021-10-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

0.002 Low

EPSS

Percentile

60.3%

TYPO3 is a free and open source content management system (framework) (CMS/CMF) from the Swiss TYPO3 Association. URL redirect is a URL redirection extension plugin used in it. TYPO3 is vulnerable to cross-site request forgery, which stems from a software feature that allows users to create and share deep links in the back-end user interface without adequately verifying that the request An attacker could use this vulnerability to create a new administrative user account to compromise the system.

CPENameOperatorVersion
TYPO3 TYPO3lt11.5.0

0.002 Low

EPSS

Percentile

60.3%