CVE-2024-47780: Information Disclosure in TYPO3 Page Tree
Problem Backend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/group, or if no mounts were configured but the pages allowed access to "everybody." However, affected users could not manipulate these pages.
Solution Update to TYPO3 versions 10.4.46 ELTS, 11.5.40 LTS, 12.4.21 LTS, 13.3.1 that fix the problem described.
Credits Thanks to Peter Schuler who reported this issue and to TYPO3 core & security team member Oliver Hader who fixed the issue.
Other sources
Information Disclosure in TYPO3 Page Tree
— Packagist
TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/group, or if no mounts were configured but the pages allowed access to "everybody." However, affected users could not manipulate these pages. Users are advised to update to TYPO3 versions 10.4.46 ELTS, 11.5.40 LTS, 12.4.21 LTS, 13.3.1 that fix the problem described. There are no known workarounds for this vulnerability.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/typo3/cms-backendto a version that resolves this vulnerability.Fixed in 10.4.46 - Upgrade
Upgrade
composer/typo3/cms-backendto a version that resolves this vulnerability.Fixed in 11.5.40 - Upgrade
Upgrade
composer/typo3/cms-backendto a version that resolves this vulnerability.Fixed in 12.4.21 - Upgrade
Upgrade
composer/typo3/cms-backendto a version that resolves this vulnerability.Fixed in 13.3.1 - Upgrade
Upgrade
TYPO3to a version that resolves this vulnerability.Fixed in 10.4.46 ELTS - Upgrade
Upgrade
TYPO3to a version that resolves this vulnerability.Fixed in 11.5.40 LTS - Upgrade
Upgrade
TYPO3to a version that resolves this vulnerability.Fixed in 12.4.21 LTS - Upgrade
Upgrade
TYPO3to a version that resolves this vulnerability.Fixed in 13.3.1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47780?
CVE-2024-47780 has been classified with a moderate severity rating due to the potential unauthorized visibility of restricted items in the backend.
How do I fix CVE-2024-47780?
To resolve CVE-2024-47780, update the typo3/cms-backend package to version 10.4.46, 11.5.40, 12.4.21, or 13.3.1.
Who is affected by CVE-2024-47780?
CVE-2024-47780 affects backend users of TYPO3 CMS versions between 10.0.0 and 10.4.46, 11.0.0 and 11.5.40, 12.0.0 and 12.4.21, and 13.0.0 and 13.3.1.
What causes CVE-2024-47780?
CVE-2024-47780 is caused by backend users having visibility of items in the page tree without proper access restrictions due to misconfigured mounts or default open permissions.
Is there a workaround for CVE-2024-47780?
There is no known workaround for CVE-2024-47780, so updating to a secure version is the recommended action.