MEDIUM

GHSA-2hp4-8h6h-93rr

Typo3 Backend History Module Vulnerable to XSS

Quick fix

GHSA-2hp4-8h6h-93rr — typo3/cms: upgrade to the fixed version with the command below.

composer require typo3/cms:^4.5.21

Details

The Backend History Module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 does not properly restrict access, which allows remote authenticated editors to read the history of arbitrary records via a crafted URL.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/typo3/cms

Introduced in: 4.5Fixed in: 4.5.21

Fixcomposer require typo3/cms:^4.5.21

Packagist/typo3/cms

Introduced in: 4.6Fixed in: 4.6.14

Fixcomposer require typo3/cms:^4.6.14

Packagist/typo3/cms

Introduced in: 4.7Fixed in: 4.7.6

Fixcomposer require typo3/cms:^4.7.6

References

https://nvd.nist.gov/vuln/detail/CVE-2012-6146[ADVISORY]
http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-005[WEB]