TYPO3 Core Multiple Cross Site Scripting Vulnerabilities

Bugtraq ID:	32284
Class:	Input Validation Error
CVE:	CVE-2008-5644 CVE-2008-5656
Remote:	Yes
Local:	No
Published:	Nov 13 2008 12:00AM
Updated:	Dec 18 2008 07:02PM
Credit:	Marcus Krause, Dirk Hoffmann
Vulnerable:	Typo3 Typo3 4.2.2 Typo3 Typo3 4.2.1 Typo3 Typo3 4.2
Not Vulnerable:	Typo3 Typo3 4.2.3

TYPO3 Core Multiple Cross Site Scripting Vulnerabilities

TYPO3 is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials.

TYPO3 4.2.0 up to and including 4.2.2 are affected.

TYPO3 Core Multiple Cross Site Scripting Vulnerabilities

An attacker can exploit these issues by enticing an unsuspecting victim to follow a malicious URI.

TYPO3 Core Multiple Cross Site Scripting Vulnerabilities

Solution:
The vendor has released an update. Please see the references for more information.


Typo3 Typo3 4.2

• Typo3 typo3_src-4.2.3.tar.gz
  http://prdownloads.sourceforge.net/typo3/typo3_src-4.2.3.tar.gz?downlo ad

Typo3 Typo3 4.2.1

• Typo3 typo3_src-4.2.3.tar.gz
  http://prdownloads.sourceforge.net/typo3/typo3_src-4.2.3.tar.gz?downlo ad

Typo3 Typo3 4.2.2

• Typo3 typo3_src-4.2.3.tar.gz
  http://prdownloads.sourceforge.net/typo3/typo3_src-4.2.3.tar.gz?downlo ad

TYPO3 Core Multiple Cross Site Scripting Vulnerabilities

References:

• Synnefoims Homepage (synnefoims)
  
• TYPO3 Security Bulletin TYPO3-20081113-1: Cross-Site Scripting vulnerability in (TYPO3)
  
• TYPO3 Security Bulletin TYPO3-20081113-2: Cross-Site Scripting vulnerability in (TYPO3)