Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47554
HistoryJun 14, 2024 - 12:44 p.m.

Denial Of Service (DoS)

2024-06-1412:44:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
typo3
vulnerability
record registration
session-data
database

7.1 High

AI Score

Confidence

High

TYPO3 is vulnerable to Denial Of Service (DoS). The vulnerability is due to improper validation of anonymous user sessions in the built-in record registration functionality using recs URL parameters, allowing attackers to create an arbitrary amount of individual session-data records in the database.

7.1 High

AI Score

Confidence

High