Headline
GHSA-8c28-5mp7-v24h: TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
Problem
Requesting invalid or non-existing resources via HTTP triggers the page error handler, which again could retrieve content to be shown as an error message from another page. This leads to a scenario in which the application is calling itself recursively - amplifying the impact of the initial attack until the limits of the web server are exceeded.
This vulnerability is very similar, but not identical, to the one described in TYPO3-CORE-SA-2021-005 (CVE-2021-21359).
Solution
Update to TYPO3 versions 9.5.38 ELTS, 10.4.33 or 11.5.20 that fix the problem described above.
References
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
Moderate severity GitHub Reviewed Published Dec 13, 2022 in TYPO3/typo3 • Updated Dec 13, 2022
Package
composer typo3/cms-core (Composer)
Affected versions
>= 9.0.0, < 9.5.38
>= 10.0.0, < 10.4.33
>= 11.0.0, < 11.5.20
Patched versions
9.5.38
10.4.33
11.5.20
Description
Problem
Requesting invalid or non-existing resources via HTTP triggers the page error handler, which again could retrieve content to be shown as an error message from another page. This leads to a scenario in which the application is calling itself recursively - amplifying the impact of the initial attack until the limits of the web server are exceeded.
This vulnerability is very similar, but not identical, to the one described in TYPO3-CORE-SA-2021-005 (CVE-2021-21359).
Solution
Update to TYPO3 versions 9.5.38 ELTS, 10.4.33 or 11.5.20 that fix the problem described above.
References
- TYPO3-CORE-SA-2022-012
References
- GHSA-8c28-5mp7-v24h
- TYPO3/typo3@1e5f444
- TYPO3/typo3@73b46b6
- https://typo3.org/security/advisory/typo3-core-sa-2022-012
ohader published the maintainer security advisory
Dec 13, 2022
Severity
Moderate
5.9
/ 10
CVSS base metrics
Attack vector
Network
Attack complexity
High
Privileges required
None
User interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
No CWEs
CVE ID
CVE-2022-23500
GHSA ID
GHSA-8c28-5mp7-v24h
Source code
TYPO3/typo3
Checking history
See something to contribute? Suggest improvements for this vulnerability.
Related news
TYPO3 is an open source PHP based web content management system. In versions prior to 9.5.38, 10.4.33, 11.5.20, and 12.1.1, requesting invalid or non-existing resources via HTTP triggers the page error handler, which again could retrieve content to be shown as an error message from another page. This leads to a scenario in which the application is calling itself recursively - amplifying the impact of the initial attack until the limits of the web server are exceeded. This vulnerability is very similar, but not identical, to the one described in CVE-2021-21359. This issue is patched in versions 9.5.38 ELTS, 10.4.33, 11.5.20 or 12.1.1.