CVE-2013-1843
Summary
| CVE | CVE-2013-1843 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-03-20 15:55:01 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Open redirect vulnerability in the Access tracking mechanism in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
NoneAV:N/AC:L/Au:N/C:P/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Typo3 | Typo3 | 4.5 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.0 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.1 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.10 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.11 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.12 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.13 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.14 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.15 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.16 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.17 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.18 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.19 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.2 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.22 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.23 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.3 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.4 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.5 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.6 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.7 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.8 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.9 | All | All | All |
| Application | Typo3 | Typo3 | 4.6 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.0 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.1 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.10 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.11 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.12 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.13 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.14 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.15 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.16 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.2 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.3 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.4 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.5 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.6 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.7 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.8 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.9 | All | All | All |
| Application | Typo3 | Typo3 | 4.7 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.0 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.1 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.2 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.3 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.4 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.5 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.6 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.7 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.8 | All | All | All |
| Application | Typo3 | Typo3 | 6.0 | All | All | All |
| Application | Typo3 | Typo3 | 6.0.1 | All | All | All |
| Application | Typo3 | Typo3 | 6.0.2 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| SQL Injection and Open Redirection in TYPO3 Core - TYPO3 - The Enterprise Open Source CMS | af854a3a-2127-422b-91ae-364da2661108 | typo3.org | Vendor Advisory |
| About Secunia Research | Flexera | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| openSUSE-SU-2013:0510-1: moderate: typo3-cms-4_5/typo3-cms-4_6/typo3-cms | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Debian -- Security Information -- DSA-2646-1 typo3-src | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| www.osvdb.org/90924 | af854a3a-2127-422b-91ae-364da2661108 | www.osvdb.org | |
| Security Advisory SA52638 - Debian update for typo3-src - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| TYPO3 CVE-2013-1843 Open Redirection Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| oss-security - Re: CVE Request: typo3 sql injection and open redirection | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.