WID-SEC-W-2024-0754

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

TYPO3 Extension "oidc": Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

view advisory published 2024-04-01

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in der TYPO3 Extension "oidc" ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-30173US——
TYPO3是瑞士TYPO3协会的一套免费开源的内容管理系统(框架)(CMS/CMF)。 TYPO3存在安全漏洞。攻击者利用该漏洞可以通过 tx_oidc 绕过身份验证的限制,从而获得用户权限。
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan