Lucene search

K
typo3TYPO3 AssociationTYPO3-CORE-SA-2021-014
HistoryOct 05, 2021 - 12:00 a.m.

Cross-Site-Request-Forgery in Backend URI Handling

2021-10-0500:00:00
TYPO3 Association
typo3.org
21

0.002 Low

EPSS

Percentile

60.3%

It has been discovered that the new TYPO3 v11 feature that allows users to create and share deep links in the backend user interface is vulnerable to cross-site-request-forgery.

CPENameOperatorVersion
typo3 cmsge11.2.0
typo3 cmsle11.4.0