CVE-2024-55892

CVE-2024-55892 affects TYPO3 Core where applications that use TYPO3\CMS\Core\Http\Uri to parse external URLs and validate the host may be vulnerable to open redirect or SSRF if the URL is used after validation. The issue is triggered when the parsed URL is used post-validation, allowing redirecti...

TYPO3 9.0.0 < 9.5.49 ELTS / 10.0.0 < 10.4.48 ELTS / 11.0.0 < 11.5.42 ELTS / 12.0.0 < 12.4.25 / 13.0.0 < 13.4.3 (TYPO3-CORE-SA-2025-002)

The version of TYPO3 installed on the remote host is 9.0.0 prior to 9.5.49 ELTS / 10.0.0 prior to 10.4.48 ELTS / 11.0.0 prior to 11.5.42 ELTS / 12.0.0 prior to 12.4.25 / 13.0.0 prior to 13.4.3. It is, therefore, affected by a vulnerability as referenced in the TYPO3-CORE-SA-2025-002 advisory. -...