{"id":"CVE-2014-9508","aliases":[],"url":"https://o3.security/vulnerability/CVE-2014-9508","summary":"Typo3 Open Redirect In Frontend Rendering","details":"The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, allows remote attackers to change URLs to arbitrary domains.\n\nAn attacker could forge a request which modifies anchor only links on the homepage of a TYPO3 installation such that they point to arbitrary domains, if the configuration option `config.prefixLocalAnchors` is used with any possible value. TYPO3 versions 4.6.x and higher are only affected if the homepage is not a shortcut to a different page. As an additional pre-condition, URL rewriting must be enabled in the web server (which it typically is) when using extensions like realurl or cooluri.\n\nInstallations where `config.absRefPrefix` is additionally set to any value are not affected by this vulnerability.\n\nExample of affected configuration:\n\n```php\nconfig.absRefPrefix =\nconfig.prefixLocalAnchors = all \npage = PAGE \npage.10 = TEXT \npage.10.value = <a href=\"#skiplinks\">Skiplinks</a> \n.htaccess:\n\nRewriteCond %{REQUEST_FILENAME} !-f \nRewriteCond %{REQUEST_FILENAME} !-d \nRewriteCond %{REQUEST_FILENAME} !-l \nRewriteRule .* index.php [L] \n```","published":"2022-05-17T03:45:52Z","modified":"2024-11-30T05:35:31.018112Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"Packagist","name":"typo3/cms","fixedVersion":"4.5.39"},{"ecosystem":"Packagist","name":"typo3/cms","fixedVersion":"6.2.9"},{"ecosystem":"Packagist","name":"typo3/cms","fixedVersion":"7.0.2"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9508"},{"type":"WEB","url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2014-9508.yaml"},{"type":"WEB","url":"https://typo3.org/security/advisory/typo3-core-sa-2014-003"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00106.html"},{"type":"WEB","url":"http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-003"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-11-30T05:35:31.018112Z"}}