Path Traversal in Mask Module Template Handling

Executive Summary

This vulnerability is a Path Traversal issue in the Mask extension for TYPO3. It occurs because the extension does not properly validate a client-supplied template element key before using it to build file paths. An authenticated backend user with access to the Mask module can exploit this by providing a key containing path traversal sequences to create or delete .html files outside the intended template directory.

Useful 0 Not Useful 0

Detection Guidance

Check installed Mask extension versions with: composer show typo3/cms-mask or in TYPO3 backend under Extensions. Verify if your version is below 8.3.12 or 9.0.11. Inspect file system for unexpected .html files outside template directories.

Useful 0 Not Useful 0

Impact Analysis

An attacker with backend access could create or delete files outside the template directory, potentially leading to unauthorized file manipulation, data loss, or system compromise. This could disrupt services or allow further attacks if critical files are affected.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized file access or modification, which may violate data integrity and confidentiality requirements under GDPR or HIPAA. Compliance could be impacted if sensitive data is exposed or altered due to file manipulation.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Mask extension to version 8.3.12 or 9.0.11 immediately. Remove unauthorized .html files outside template directories. Restrict backend user access to Mask module until update is applied.

Useful 0 Not Useful 0