CVE-2010-3661: Medium severity Typo3 TYPO3 vulnerability
Published Nov 1, 2019
·Updated
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Open Redirection on the backend.
Affected Software
9 affected componentsFixes available
composer/typo3/cms-backend>=4.4.0<4.4.1
4.4.1
composer/typo3/cms-backend>=4.3.0<4.3.4
4.3.4
composer/typo3/cms-backend>=4.2.0<4.2.13
4.2.13
composer/typo3/cms-backend<4.1.14
4.1.14
debian/typo3-src
Typo3 TYPO3>=4.4.0<4.4.1
Typo3 TYPO3>=4.3.0<4.3.4
Typo3 TYPO3<4.1.14
Typo3 TYPO3>=4.2.0<4.2.13
Event History
Nov 1, 2019
CVE Published
via MITRE·05:26 PM
Data Sourced
via MITRE·05:26 PM
Description
Apr 21, 2022
Advisory Published
via GitHub·01:57 AM
Frequently Asked Questions
1
What is the severity of CVE-2010-3661?
CVE-2010-3661 is considered a moderate vulnerability due to its potential for Open Redirection attacks.
2
How do I fix CVE-2010-3661?
To fix CVE-2010-3661, update TYPO3 to version 4.4.1, 4.3.4, 4.2.13, or 4.1.14.
3
Which versions of TYPO3 are affected by CVE-2010-3661?
CVE-2010-3661 affects TYPO3 versions before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4, and 4.4.x before 4.4.1.
4
Can CVE-2010-3661 be exploited remotely?
Yes, CVE-2010-3661 can be exploited remotely as it affects the backend interface of TYPO3.
5
What type of attack does CVE-2010-3661 facilitate?
CVE-2010-3661 facilitates Open Redirection attacks, which can lead users to malicious external websites.