EUVD-2021-1024

Malware in sbrugna...

GHSA-W736-QV86-VQ94 TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism

The jumpUrl aka access tracking implementation in tslib/class.tslibfe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers to read arbitrary files via unspecified...

TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism

The jumpUrl aka access tracking implementation in tslib/class.tslibfe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers to read arbitrary files via unspecified...

Typo3 Backend XSS Vulnerability

An Information Disclosure vulnerability in jumpUrl mechanism, used to track access on web pages and provided files, allows a remote attacker to read arbitrary files on a host. The expected value of a mandatory hash secret, intended to invalidate such requests, is exposed to remote users allowing...

GHSA-JG55-3Q6H-2CCF Typo3 Backend XSS Vulnerability

An Information Disclosure vulnerability in jumpUrl mechanism, used to track access on web pages and provided files, allows a remote attacker to read arbitrary files on a host. The expected value of a mandatory hash secret, intended to invalidate such requests, is exposed to remote users allowing...

Open Redirection

directmailteam/direct-mailis vulnerable to open redirection. The package does not sanitize jumpUrl allowing an attacker to redirect users to a malicious site...

GHSA-952M-M83C-3XM6 Open redirect in direct_mail

The directmail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl...

CVE-2020-12699

The directmail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl...

Open redirect

The directmail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl...

CVE-2020-12699

The directmail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl...

CVE-2020-12699

The directmail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl...

CVE-2020-12699

The CVE-2020-12699 entry concerns the TYPO3 Direct Mail (direct_mail) extension up to version 5.2.3, where the jumpUrl parameter is not sanitized, enabling an Open Redirect. This conclusion is supported by multiple connected sources (Veracode, GHSA/OSV, CVE records) describing an Open Redirect vi...

PT-2020-13213

Name of the Vulnerable Software and Affected Versions TYPO3 direct mail extension versions through 5.2.3 Description The issue concerns an Open Redirect via the jumpUrl. Recommendations For versions through 5.2.3, update to a version that contains a fix for this issue...

TYPO3 Direct Mail Component Input Validation Error Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. direct Mail is an email marketing extension plugin used in it. A security vulnerability exists in the Direct Mail component of TYPO3 5.2.3 and earlier versions, which stems from...

CVE-2020-12699: URL Redirection to Untrusted Site

The directmail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl...

TYPO3 Injection Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. An injection vulnerability exists in jumpurl in TYPO3, which stems from the program's failure to process user input and can be exploited by an attacker to inject headers...

CVE-2010-3668

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secure download feature jumpurl...

CVE-2010-3668

TYPO3 core vulnerability CVE-2010-3668: header injection in the secure download feature (jumpurl) affects TYPO3 releases 4.0?–4.1.x up to 4.1.14, 4.2.x up to 4.2.13, 4.3.x up to 4.3.4 and 4.4.x up to 4.4.1. Root cause: improper handling of user input in jumpurl leads to header injection. Impact: ...

PT-2019-6572

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 4.1.14 TYPO3 versions 4.2.x prior to 4.2.13 TYPO3 versions 4.3.x prior to 4.3.4 TYPO3 versions 4.4.x prior to 4.4.1 Description The issue allows Header Injection in the secure download feature jumpurl. Recommendations F...

CVE-2010-3668: Improper Neutralization of Special Elements in Output Used by a Downstream Component

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secure download feature jumpurl...