TYPO3 CMS vulnerable to Denial of Service in Page Error Handling

🗓️ 13 Dec 2022 17:02:09Reported by GitHub Advisory DatabaseType

TYPO3 CMS vulnerable to Denial of Service in Page Error Handling. Update to fix

Reporter	Title	Published	Views	Family All 21
Circl	CVE-2022-23500	21 Apr 202515:02	–	circl
CNNVD	TYPO3 安全漏洞	13 Dec 202200:00	–	cnnvd
CVE	CVE-2022-23500	14 Dec 202207:07	–	cve
Cvelist	CVE-2022-23500 TYPO3 subject to Uncontrolled Recursion resulting in Denial of Service	14 Dec 202207:07	–	cvelist
FreeBSD	typo3 -- multiple vulnerabilities	13 Dec 202200:00	–	freebsd
EUVD	EUVD-2022-7562	3 Oct 202520:07	–	euvd
Tenable Nessus	FreeBSD : typo3 -- multiple vulnerabilities (d9e154c9-7de9-11ed-adca-080027d3a315)	17 Dec 202200:00	–	nessus
Tenable Nessus	TYPO3 9.0.0 < 9.5.38 ELTS / 10.0.0 < 10.4.33 / 11.0.0 < 11.5.20 (TYPO3-CORE-SA-2022-012)	13 Dec 202200:00	–	nessus
Friends Of PHP	TYPO3-CORE-SA-2022-012: Denial of Service in Page Error Handling	13 Dec 202209:18	–	friendsofphp
Friends Of PHP	TYPO3-CORE-SA-2022-012: Denial of Service in Page Error Handling	13 Dec 202209:18	–	friendsofphp

Vulners

Node

typo3 cms-coreRange11.0.0–11.5.20composer

typo3 cms-coreRange10.0.0–10.4.33composer

typo3 cms-coreRange9.0.0–9.5.38composer

Source	Link
github	www.github.com/TYPO3/typo3/security/advisories/GHSA-8c28-5mp7-v24h
github	www.github.com/TYPO3/typo3/commit/1e5f44417f031c9c5a9f9d09a6a841cf89aa7b7a
github	www.github.com/TYPO3/typo3/commit/73b46b6a627093112cfca4b895a198ca5e1970b7
typo3	www.typo3.org/security/advisory/typo3-core-sa-2022-012
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23500.yaml
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-23500
github	www.github.com/advisories/GHSA-8c28-5mp7-v24h

30 Jan 2023 05:05Current

1.2Low risk

Vulners AI Score1.2

CVSS 3.15.9 - 7.5

EPSS0.00411

SSVC