Lucene search

Backend Same-Site Request Forgery in TYPO3 CMS

🗓️ 13 May 2020 23:09:40Reported by GitHub Advisory DatabaseType

Backend Same-Site Request Forgery in TYPO3 CMS vulnerability. Update to TYPO3 versions 9.5.17 or 10.4.2. Mitigate with Sudo Mode Extension and Content Security Polic

Reporter	Title	Published	Views	Family All 25
Friends Of PHP	TYPO3-CORE-SA-2020-006: Same-Site Request Forgery to Backend User Interface	12 May 202009:21	–	friendsofphp
Friends Of PHP	TYPO3-CORE-SA-2020-006: Same-Site Request Forgery to Backend User Interface	12 May 202009:21	–	friendsofphp
RedhatCVE	CVE-2020-11069	5 Feb 202514:13	–	redhatcve
Typo3	Same-Origin Request Forgery to Backend User Interface	12 May 202000:00	–	typo3
Typo3	Cross-Site-Request-Forgery in Backend URI Handling	5 Oct 202100:00	–	typo3
Prion	Cross site request forgery (csrf)	14 May 202000:15	–	prion
Prion	Cross site request forgery (csrf)	5 Oct 202118:15	–	prion
OSV	CVE-2020-11069	14 May 202000:15	–	osv
OSV	BIT-typo3-2020-11069	6 Mar 202411:11	–	osv
OSV	Backend Same-Site Request Forgery in TYPO3 CMS	13 May 202023:40	–	osv

Vulners

Node

typo3 cms_poll_system_extensionRange9.0.0–9.5.17

typo3 cms_poll_system_extensionRange10.0.0–10.4.2

typo3 cms\-coreRange10.0.0–10.4.2

typo3 cms\-coreRange9.0.0–9.5.17

Source	Link
github	www.github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-pqg8-crx9-g8m4
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-11069
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2020-11069.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2020-11069.yaml
typo3	www.typo3.org/security/advisory/typo3-core-sa-2020-006
github	www.github.com/advisories/GHSA-pqg8-crx9-g8m4

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 May 2020 23:40Current

0.4Low risk

Vulners AI Score0.4

CVSS26.8

CVSS38 - 8.8

EPSS0.00535