CVE-2024-25120

MEDIUM

TYPO3 Core - Unauthorized Resource Access via t3:// URI Scheme

Title source: manual

Description

TYPO3 is an open source PHP based web content management system released under the GNU GPL. The TYPO3-specific `t3://` URI scheme could be used to access resources outside of the users' permission scope. This encompassed files, folders, pages, and records (although only if a valid link-handling configuration was provided). Exploiting this vulnerability requires a valid backend user account. Users are advised to update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described. There are no known workarounds for this issue.

References (3)

Core 3

Core References

Third Party Advisory x_refsource_confirm

https://github.com/TYPO3/typo3/security/advisories/GHSA-wf85-8hx9-gj7c

Third Party Advisory x_refsource_misc

https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-references

Vendor Advisory x_refsource_misc

https://typo3.org/security/advisory/typo3-core-sa-2024-005

Scores

CVSS v3 4.3

EPSS 0.0019

EPSS Percentile 40.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-284 CWE-200

Status published

Products (3)

typo3/cms-core 8.0.0 - 8.7.57Packagist

typo3/typo3 13.0.0

typo3/typo3 8.0.0 - 8.7.57

Published Feb 13, 2024

Tracked Since Feb 18, 2026