GHSA-29m4-mx89-3mjg json
TYPO3 Denial of Service in Online Media Asset Handling
published 2y ago modified last yr.
- cvss
- 5.3
- version 3.1, GitHub
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- —
- no score, EPSS covers CVEs only
- public exploits
- 0
- none known
Summary
Online Media Asset Handling (*.youtube and *.vimeo files) in the TYPO3 backend is vulnerable to denial of service. Putting large files with according file extensions results in high consumption of system resources. This can lead to exceeding limits of the current PHP process which results in a dysfunctional backend component. A valid backend user account or write access on the server system (e.g. SFTP) is needed in order to exploit this vulnerability.
Patch / fix
- packagist typo3/cms-core 7.6.32, 8.7.21, 9.5.2
Is GHSA-29m4-mx89-3mjg in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerCVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| GitHub | 3.1 | 5.3 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| packagist | typo3/cms-core | >=8.0.0, <8.7.21 >=9.0.0, <9.5.2 >=7.0.0, <7.6.32 |
8.7.21 9.5.2 7.6.32 |
Classification
- Weakness
-
- CWE-770 Allocation of Resources Without Limits or Throttling
References
-
github.com
/TYPO3-CMS/core/commit/9b2ecd2a402a76e17b78f78ed2ac9b7fff36d201
web
-
github.com
/TYPO3-CMS/core/commit/aa2dcb340bc7f2b815c8eee02cf54e100f82f3e7
web
-
github.com
/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-6.yaml
web
-
typo3.org
/security/advisory/typo3-core-sa-2018-011
web
Sources
- GitHub Advisory GHSA-29m4-mx89-3mjg
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.