TYPO3 CMS vulnerable to Weak Authentication in Frontend Login
Package
Affected versions
>= 10.0.0, < 10.4.33
>= 11.0.0, < 11.5.20
>= 12.0.0, < 12.1.1
Patched versions
10.4.33
11.5.20
12.1.1
< 8.7.49
>= 9.0.0, < 9.5.38
>= 10.0.0, < 10.4.33
>= 11.0.0, < 11.5.20
>= 12.0.0, < 12.1.1
8.7.49
9.5.38
10.4.33
11.5.20
12.1.1
Description
Published to the GitHub Advisory Database
Dec 13, 2022
Reviewed
Dec 13, 2022
Published by the National Vulnerability Database
Dec 14, 2022
Last updated
Jan 30, 2023
Credits
-
derhansen Analyst
Problem
Restricting frontend login to specific users, organized in different storage folders (partitions), can be bypassed. A potential attacker might use this ambiguity in usernames to get access to a different account - however, credentials must be known to the adversary.
Solution
Update to TYPO3 versions 8.7.49 ELTS, 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1 that fix the problem described above.
References
References