CVE-2014-9509

Published Jan 4, 2015 CVSS 2.0 · 7.5 High EPSS 1.5% KEV · Not listed
Description
The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set to all or cached, allows remote attackers to have an unspecified impact (possibly resource consumption) via a "Cache Poisoning" attack using a URL with arbitrary arguments, which triggers a reload of the page.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-2492 The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set to all or cached, allows remote attackers to have an unspecified impact (possibly resource consumption) via a "Cache Poisoning" attack using a URL with arbitrary arguments, which triggers a reload of the page.
Github GHSA Github GHSA GHSA-5479-gqqr-f9gj Typo3 Vulnerable to Cache Poisoning
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Sep 17, 2024, 3:13 AM
Reserved
Jan 4, 2015, 12:00 AM
Status
Modified
Published
Jan 4, 2015, 9:59 PM
Modified
Jun 17, 2026, 12:18 AM