CVE-2013-4680: Medium severity maag form captcha vulnerability
Published Jun 25, 2013
·Updated
Open redirect vulnerability in Maag Form Captcha extension 2.0.0 and earlier for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected Software
11 affected components
Urs Maag Maag Form Captcha=1.0.0
Urs Maag Maag Form Captcha=1.0.1
Urs Maag Maag Form Captcha=1.0.2
Urs Maag Maag Form Captcha=1.1.0
Urs Maag Maag Form Captcha=1.1.1
Urs Maag Maag Form Captcha=1.1.2
Urs Maag Maag Form Captcha=1.1.3
Urs Maag Maag Form Captcha=1.1.4
Urs Maag Maag Form Captcha=1.2.0
Urs Maag Maag Form Captcha=1.2.1
Typo3 TYPO3
Event History
Jun 25, 2013
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4680?
CVE-2013-4680 has a medium severity rating as it allows attackers to redirect users to malicious websites.
2
How do I fix CVE-2013-4680?
To fix CVE-2013-4680, update the Maag Form Captcha extension to version 2.0.0 or later.
3
What systems are affected by CVE-2013-4680?
CVE-2013-4680 affects the Maag Form Captcha extension versions 1.0.0 to 1.2.1 for TYPO3.
4
Can CVE-2013-4680 be exploited in phishing attacks?
Yes, CVE-2013-4680 can be exploited to conduct phishing attacks by redirecting users to arbitrary websites.
5
Is there a workaround for CVE-2013-4680 if I cannot update?
A potential workaround for CVE-2013-4680 is to disable the Maag Form Captcha extension until it can be updated.