CVE-2010-3668: High severity Typo3 TYPO3 vulnerability

Q: What is the severity of CVE-2010-3668?

The severity of CVE-2010-3668 is high.

Q: How does CVE-2010-3668 affect TYPO3?

CVE-2010-3668 affects TYPO3 versions before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4, and 4.4.x before 4.4.1.

Q: What is the vulnerability in CVE-2010-3668?

The vulnerability in CVE-2010-3668 is Header Injection in the secure download feature jumpurl.

Q: Are there any remedies available for CVE-2010-3668?

There are no known remedies available for CVE-2010-3668.

Q: Where can I find more information about CVE-2010-3668?

You can find more information about CVE-2010-3668 at the following references: [Typo3 Security Advisory](https://typo3.org/security/advisory/typo3-sa-2010-012/#Header_Injection), [Debian Security Tracker](https://security-tracker.debian.org/tracker/CVE-2010-3668), [Debian Bug Report](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719).

Published Nov 4, 2019

Updated

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secure download feature jumpurl.

Affected Software

5 affected components

debian/typo3-src

Typo3 TYPO3>=4.4.0<4.4.1

Typo3 TYPO3>=4.3.0<4.3.4

Typo3 TYPO3<4.1.14

Typo3 TYPO3>=4.2.0<4.2.13

Event History

Nov 4, 2019

CVE Published

via MITRE·10:01 PM

Data Sourced

via MITRE·10:01 PM

Description

Feb 17, 2026

Data Sourced

via Debian·10:17 PM

DescriptionAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-3668?

The severity of CVE-2010-3668 is high.

How does CVE-2010-3668 affect TYPO3?

CVE-2010-3668 affects TYPO3 versions before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4, and 4.4.x before 4.4.1.

What is the vulnerability in CVE-2010-3668?