Open redirect

2019-11-0118:15:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.5%

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Open Redirection on the backend.

CPENameOperatorVersion
typo3ge4.4.0
typo3lt4.4.1
typo3ge4.3.0
typo3lt4.3.4
typo3lt4.1.14
typo3ge4.2.0
typo3lt4.2.13

Name	Operator	Version
typo3	ge	4.4.0
typo3	lt	4.4.1
typo3	ge	4.3.0
typo3	lt	4.3.4
typo3	lt	4.1.14
typo3	ge	4.2.0
typo3	lt	4.2.13

References

bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719

security-tracker.debian.org/tracker/CVE-2010-3661

typo3.org/security/advisory/typo3-sa-2010-012/