CVE-2024-34355: TYPO3 vulnerable to an HTML Injection in the History Module
Problem The history backend module is vulnerable to HTML injection. Although Content-Security-Policy headers effectively prevent JavaScript execution, adversaries can still inject malicious HTML markup. Exploiting this vulnerability requires a valid backend user account.
Solution Update to TYPO3 version 13.1.1 that fixes the problem described.
Credits Thanks to TYPO3 core team member Andreas Kienast who reported this issue and to TYPO3 core & security team Benjamin Franzke who fixed the issue.
References TYPO3-CORE-SA-2024-007
Other sources
TYPO3 is an enterprise content management system. Starting in version 13.0.0 and prior to version 13.1.1, the history backend module is vulnerable to HTML injection. Although Content-Security-Policy headers effectively prevent JavaScript execution, adversaries can still inject malicious HTML markup. Exploiting this vulnerability requires a valid backend user account. TYPO3 version 13.1.1 fixes the problem described.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34355?
CVE-2024-34355 is a moderate severity vulnerability that allows for HTML injection in the TYPO3 CMS.
How do I fix CVE-2024-34355?
To mitigate CVE-2024-34355, update TYPO3 CMS to version 13.1.1 or later.
Who is affected by CVE-2024-34355?
CVE-2024-34355 affects TYPO3 CMS versions from 13.0.0 to 13.1.0.
What kind of attack can CVE-2024-34355 enable?
CVE-2024-34355 can enable an attacker with a valid backend user account to inject malicious HTML markup.
Is a Content-Security-Policy effective against CVE-2024-34355?
While Content-Security-Policy headers prevent JavaScript execution, they do not mitigate the HTML injection aspect of CVE-2024-34355.