CVE-2014-9508

Published Jan 4, 2015 CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Description
The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set and using a homepage with links that only contain anchors, allows remote attackers to change URLs to arbitrary domains for those links via unknown vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-5301 The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set and using a homepage with links that only contain anchors, allows remote attackers to change URLs to arbitrary domains for those links via unknown vectors.
Github GHSA Github GHSA GHSA-v6xv-rmqc-wcc8 Typo3 Open Redirect In Frontend Rendering
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 1:47 PM
Reserved
Jan 4, 2015, 12:00 AM
Status
Modified
Published
Jan 4, 2015, 9:59 PM
Modified
Jun 17, 2026, 12:18 AM