Denial of Service in TYPO3 Bookmark Toolbar

🗓️ 08 Oct 2024 22:18:27Reported by GitHub Advisory DatabaseType

Denial of Service in TYPO3 Bookmark Toolbar due to insufficient input validation. Requires admin-level backend user account. Update to TYPO3 versions 10.4.46 ELTS, 11.5.40 LTS, 12.4.21 LTS, 13.3.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2024-34537	28 Oct 202416:09	–	circl
CNNVD	TYPO3 安全漏洞	28 Oct 202400:00	–	cnnvd
CVE	CVE-2024-34537	28 Oct 202400:00	–	cve
Cvelist	CVE-2024-34537	28 Oct 202400:00	–	cvelist
NVD	CVE-2024-34537	28 Oct 202414:15	–	nvd
OSV	CVE-2024-34537	28 Oct 202400:00	–	osv
OSV	GHSA-FFCV-V6PW-QHRP Denial of Service in TYPO3 Bookmark Toolbar	8 Oct 202422:18	–	osv
Positive Technologies	PT-2024-25956	8 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-34537	9 Jan 202609:36	–	redhatcve
Snyk	Denial of Service (DoS)	8 Oct 202422:18	–	snyk

Vulners

Node

typo3 cms-backendRange10.0.0–10.4.45composer

typo3 cms-backendRange11.0.0–11.5.39composer

typo3 cms-backendRange12.0.0–12.4.20composer

typo3 cms-backendcomposer

Source	Link
github	www.github.com/TYPO3/typo3/security/advisories/GHSA-ffcv-v6pw-qhrp
typo3	www.typo3.org/security/advisory/typo3-core-sa-2024-011
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-34537
mgm-sp	www.mgm-sp.com/cve/denial-of-service-in-typo3-bookmark-toolbar
github	www.github.com/advisories/GHSA-ffcv-v6pw-qhrp

31 Oct 2024 19:31Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.14.9

EPSS0.00684

SSVC

denial of service typo3 input validation backend user interface administrator account update security advisory