CVE-2024-55892: TYPO3 Potential Open Redirect via Parsing Differences
Problem Applications that use TYPO3\CMS\Core\Http\Uri to parse externally provided URLs (e.g., via a query parameter) and validate the host of the parsed URL may be vulnerable to open redirect or SSRF attacks if the URL is used after passing the validation checks.
Solution Update to TYPO3 versions 9.5.49 ELTS, 10.4.48 ELTS, 11.5.42 ELTS, 12.4.25 LTS, 13.4.3 LTS that fix the problem described.
Credits Thanks to Sam Mush and Christian Eßl who reported this issue and to TYPO3 core & security team member Benjamin Franzke who fixed the issue.
References TYPO3-CORE-SA-2025-002
Other sources
TYPO3 is a free and open source Content Management Framework. Applications that use TYPO3\CMS\Core\Http\Uri to parse externally provided URLs (e.g., via a query parameter) and validate the host of the parsed URL may be vulnerable to open redirect or SSRF attacks if the URL is used after passing the validation checks. Users are advised to update to TYPO3 versions 9.5.49 ELTS, 10.4.48 ELTS, 11.5.42 LTS, 12.4.25 LTS, 13.4.3 which fix the problem described. There are no known workarounds for this vulnerability.
— NVD
TYPO3 Potential Open Redirect via Parsing Differences
— Packagist
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/typo3/cms-coreto a version that resolves this vulnerability.Fixed in 13.4.3 - Upgrade
Upgrade
composer/typo3/cms-coreto a version that resolves this vulnerability.Fixed in 12.4.25 - Upgrade
Upgrade
composer/typo3/cms-coreto a version that resolves this vulnerability.Fixed in 11.5.42 - Upgrade
Upgrade
composer/typo3/cms-coreto a version that resolves this vulnerability.Fixed in 10.4.48 - Upgrade
Upgrade
composer/typo3/cms-coreto a version that resolves this vulnerability.Fixed in 9.5.49 - Upgrade
Upgrade
TYPO3to a version that resolves this vulnerability.Fixed in 9.5.49 - Upgrade
Upgrade
TYPO3to a version that resolves this vulnerability.Fixed in 10.4.48 - Upgrade
Upgrade
TYPO3to a version that resolves this vulnerability.Fixed in 11.5.42 - Upgrade
Upgrade
TYPO3to a version that resolves this vulnerability.Fixed in 12.4.25 - Upgrade
Upgrade
TYPO3to a version that resolves this vulnerability.Fixed in 13.4.3
Event History
Frequently Asked Questions
What is the severity of CVE-2024-55892?
CVE-2024-55892 has a high severity due to its potential to cause open redirect or SSRF attacks.
How do I fix CVE-2024-55892?
To mitigate CVE-2024-55892, update TYPO3 CMS Core to version 9.5.49, 10.4.48, 11.5.42, 12.4.25, or 13.4.3.
What types of attacks are associated with CVE-2024-55892?
CVE-2024-55892 is associated with open redirect and server-side request forgery (SSRF) attacks.
Which TYPO3 CMS versions are affected by CVE-2024-55892?
The affected TYPO3 CMS versions range from 9.0.0 to 13.4.2 prior to the patched versions.
What components are vulnerable in CVE-2024-55892?
The vulnerability exists in the `TYPO3\CMS\Core\Http\Uri` component when parsing and validating externally provided URLs.