TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme
### Problem The TYPO3-specific [`t3://` URI scheme](https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-references) could be used to access resources outside of the users' permission scope. This encompassed files, folders, pages, and records (although only if a valid link-handling configuration was provided). Exploiting this vulnerability requires a valid backend user account. ### Solution Update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described. ### Credits Thanks to Richie Lee who reported this issue and to TYPO3 core & security team member Benjamin Franzke who fixed the issue. ### References * [TYPO3-CORE-SA-2024-005](https://typo3.org/security/advisory/typo3-core-sa-2024-005)
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-25120US | medium4.3 | — | ||
TYPO3 is an open source PHP based web content management system released under the GNU GPL. The TYPO3-specific `t3://` URI scheme could be used to access resources outside of the u… | ||||
references
External citations — patches, advisories, analysis.
- https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-referencesWEB
- https://github.com/TYPO3/typo3PACKAGE
- https://github.com/TYPO3/typo3/commit/2de87ff113ba24333ab7cbb8078588743f8958d6WEB
- https://github.com/TYPO3/typo3/commit/33f4d279b82bca0a509227a17065244c6156e68fWEB
- https://github.com/TYPO3/typo3/commit/ae0dfc4c058a90c10eedb3f49cfaf33164d21cddWEB
- https://github.com/TYPO3/typo3/security/advisories/GHSA-wf85-8hx9-gj7cWEB
- https://nvd.nist.gov/vuln/detail/CVE-2024-25120ADVISORY
- https://typo3.org/security/advisory/typo3-core-sa-2024-005WEB
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan