CVE-2023-24814

TYPO3 is a free and open source Content Management Framework released under the GNU General Public License. In affected versions the TYPO3 core component "GeneralUtility::getIndpEnv" uses the unfiltered server environment variable "PATHINFO", which allows attackers to inject malicious content. In...

Link spoofing and cache poisoning vulnerabilities in TYPO3 CMS

It has been discovered that TYPO3 CMS is vulnerable to Link Spoofing and Cache Poisoning. Component Type: TYPO3 CMS Vulnerability Types: Link Spoofing, Cache Poisoning Overall Severity: Medium Release Date: December 10, 2014 Vulnerable subcomponent: Frontend Rendering Vulnerability Type: Link...