TYPO3 vulnerable to an HTML Injection in the History Module

中 5.4CVE-2024-34355 · GHSA-xjwx-78x7-q6jc · 14/05/2024 公開 · 17/06/2026 更新

要点

CVE-2024-34355 は typo3/cms-core, typo3 (typo3) に影響する深刻度「中」 (CVSS 5.4) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.59%（全脆弱性の 48.0% より高い）。
対処：13.1.1 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
typo3/cms-core Packagist	`≥ 13.0.0, < 13.1.1`	`13.1.1`
typo3 typo3	`≥ 13.0.0, < 13.1.1`	`13.1.1`

概要

Problem

The history backend module is vulnerable to HTML injection. Although Content-Security-Policy headers effectively prevent JavaScript execution, adversaries can still inject malicious HTML markup. Exploiting this vulnerability requires a valid backend user account.

Solution

Update to TYPO3 version 13.1.1 that fixes the problem described.

Credits

Thanks to TYPO3 core team member Andreas Kienast who reported this issue and to TYPO3 core & security team Benjamin Franzke who fixed the issue.

References

TYPO3-CORE-SA-2024-007

NVD の説明

TYPO3 is an enterprise content management system. Starting in version 13.0.0 and prior to version 13.1.1, the history backend module is vulnerable to HTML injection. Although Content-Security-Policy headers effectively prevent JavaScript execution, adversaries can still inject malicious HTML markup. Exploiting this vulnerability requires a valid backend user account. TYPO3 version 13.1.1 fixes the problem described.