Allele Security Alert
ASA-2019-00414
Identifier(s)
ASA-2019-00414, CVE-2019-12748, TYPO3-CORE-SA-2019-015
Title
Cross-Site Scripting in Link Handling
Vendor(s)
TYPO3 Association
Product(s)
TYPO3 CMS
Affected version(s)
TYPO3 CMS versions 8.3.0 to 8.7.26
TYPO3 CMS versions 9.0.0 to 9.5.7
Fixed version(s)
TYPO3 CMS version 8.7.27
TYPO3 CMS version 9.5.8
Proof of concept
Unknown
Description
It has been discovered that the t3:// URL handling is vulnerable to cross-site scripting when making use of javascript: or data: scheme in link fields like the following.
t3://url/?url=javascript:alert(1);
Not only regular backend forms are affected but also frontend extensions which use the rendering with typolink.
Technical details
Unknown
Credits
Robin Peraglie (RIPS technologies)
Reference(s)
TYPO3 9.5.8 and 8.7.27 security releases published
https://typo3.org/article/typo3-958-and-8727-security-releases-published/
TYPO3-CORE-SA-2019-015: Cross-Site Scripting in Link Handling
https://typo3.org/security/advisory/typo3-core-sa-2019-015/
[TYPO3-announce] Announcing TYPO3 v9.5.8 and v8.7.27 security releases
http://lists.typo3.org/pipermail/typo3-announce/2019/000447.html
CVE-2019-12748
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12748
CVE-2019-12748
https://nvd.nist.gov/vuln/detail/CVE-2019-12748
If there is any error in this alert or you wish a comprehensive analysis, let us know.
Last modified: July 11, 2019