CVE-2021-21338 Open Redirection in Login Handling

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 it has been discovered that Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing...

CVE-2021-21338

TYPO3 CMS is affected by an Open Redirection in Login Handling. Affected versions are 6.2.x before 6.2.57, 7.6.x before 7.6.51, 8.x before 8.7.40, 9.x before 9.5.25, 10.x before 10.4.14, and 11.x before 11.1.1. The root cause is improper validation of the HTTP Host header, enabling redirects to a...