CVE-2013-1843: TYPO3 Open redirect vulnerability in the Access tracking mechanism
Open redirect vulnerability in the Access tracking mechanism in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Other sources
TYPO3 Open redirect vulnerability in the Access tracking mechanism
— Packagist
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/typo3/cms-coreto a version that resolves this vulnerability.Fixed in 6.0.3 - Upgrade
Upgrade
composer/typo3/cms-coreto a version that resolves this vulnerability.Fixed in 4.7.9 - Upgrade
Upgrade
composer/typo3/cms-coreto a version that resolves this vulnerability.Fixed in 4.6.17 - Upgrade
Upgrade
composer/typo3/cms-coreto a version that resolves this vulnerability.Fixed in 4.5.24
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1843?
CVE-2013-1843 is classified as a moderate severity vulnerability due to its potential for open redirection and phishing attacks.
How do I fix CVE-2013-1843?
To fix CVE-2013-1843, upgrade TYPO3 to version 4.5.24, 4.6.17, 4.7.9, or 6.0.3 or later.
What impact does CVE-2013-1843 have on my TYPO3 installation?
CVE-2013-1843 allows attackers to redirect users to arbitrary websites, which can facilitate phishing and other malicious activities.
Which versions of TYPO3 are affected by CVE-2013-1843?
CVE-2013-1843 affects TYPO3 versions 4.5.x prior to 4.5.24, 4.6.x prior to 4.6.17, 4.7.x prior to 4.7.9, and 6.0.x prior to 6.0.3.
Is there a workaround for CVE-2013-1843 if I can't update TYPO3 immediately?
Currently, there are no effective workarounds for CVE-2013-1843; it is strongly recommended to update to a patched version.