Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2021-41113— Cross-Site-Request-Forgery in Backend URI Handling in Typo3

Quick assessment

Affected
TYPO3 typo3
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

TYPO3是瑞士TYPO3（Typo3）协会的一套免费开源的内容管理系统(框架)(CMS/CMF)。URL redirect是使用在其中的一个URL重定向扩展插件。 TYPO3 v11版本存在跨站请求伪造漏洞，该漏洞源于软件特性允许用户在后端用户界面中创建和共享深度链接，这很容易受到跨站点请求伪造的影响。然而，它并不局限于相同的站点上下文，也不需要对攻击者进行身份验证。在最坏的情况下，攻击者可利用该漏洞创建一个新的管理用户帐户来破坏系统。

CVSS 8.8 · High EPSS 0.64% · P49
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2021-41113

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cross-Site-Request-Forgery in Backend URI Handling in Typo3
Source: CVE Program / CVE List V5
Vulnerability Description
TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the new TYPO3 v11 feature that allows users to create and share deep links in the backend user interface is vulnerable to cross-site-request-forgery. The impact is the same as described in TYPO3-CORE-SA-2020-006 (CVE-2020-11069). However, it is not limited to the same site context and does not require the attacker to be authenticated. In a worst case scenario, the attacker could create a new admin user account to compromise the system. To successfully carry out an attack, an attacker must trick his victim to access a compromised system. The victim must have an active session in the TYPO3 backend at that time. The following Same-Site cookie settings in $GLOBALS[TYPO3_CONF_VARS][BE][cookieSameSite] are required for an attack to be successful: SameSite=strict: malicious evil.example.org invoking TYPO3 application at good.example.org and SameSite=lax or none: malicious evil.com invoking TYPO3 application at example.org. Update your instance to TYPO3 version 11.5.0 which addresses the problem described.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨站请求伪造(CSRF)
Source: CVE Program / CVE List V5
Vulnerability Title
TYPO3 跨站请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TYPO3是瑞士TYPO3（Typo3）协会的一套免费开源的内容管理系统(框架)(CMS/CMF)。URL redirect是使用在其中的一个URL重定向扩展插件。 TYPO3 v11版本存在跨站请求伪造漏洞，该漏洞源于软件特性允许用户在后端用户界面中创建和共享深度链接，这很容易受到跨站点请求伪造的影响。然而，它并不局限于相同的站点上下文，也不需要对攻击者进行身份验证。在最坏的情况下，攻击者可利用该漏洞创建一个新的管理用户帐户来破坏系统。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
TYPO3 typo3 >= 11.2.0, < 11.5.0 -

II. Public POCs for CVE-2021-41113

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-41113

请登录查看更多情报信息。

Patches & Fixes for CVE-2021-41113 (1)

Vendor Advisories for CVE-2021-41113 (2)

IV. Related Vulnerabilities

Same product: typo3
Same vendor: TYPO3
Same weakness: CWE-352

V. Comments for CVE-2021-41113

No comments yet

Leave a comment