Executive Summary

This vulnerability is an open-redirect issue in the TYPO3 CMS software, specifically in the GeneralUtility::sanitizeLocalUrl function. Although this function is supposed to restrict URLs to local ones, it can be bypassed, allowing attackers to redirect users to arbitrary external websites. This can be exploited to conduct phishing attacks by tricking users into visiting malicious sites through manipulated URLs. [1]

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can impact you by enabling attackers to redirect your users to malicious external websites without your consent. This can lead to phishing attacks where users might be deceived into providing sensitive information or downloading malware. While the impact on confidentiality, integrity, and availability is limited, the risk to user trust and security is significant. [1]

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by monitoring for URLs that use the vulnerable TYPO3 CMS versions and checking for unexpected redirects to external sites via the GeneralUtility::sanitizeLocalUrl function. Specific detection commands are not provided in the available resources. It is recommended to review web server logs for suspicious redirect patterns and verify the TYPO3 CMS version in use to identify if it falls within the affected ranges. [1]

Useful 0 Not Useful 0

Mitigation Strategies

The immediate mitigation step is to update TYPO3 CMS to the patched versions: 9.5.55 ELTS, 10.4.54 ELTS, 11.5.48 ELTS, 12.4.37 LTS, or 13.4.18 LTS. Additionally, follow the TYPO3 Security Guide recommendations and subscribe to the typo3-announce mailing list for ongoing security updates. [1]

Useful 0 Not Useful 0