TYPO3 TEQneers SEO Enhancements Extension Cross Site Request Forgery Vulnerability

Bugtraq ID:	60274
Class:	Input Validation Error
CVE:	CVE-2013-4871
Remote:	Yes
Local:	No
Published:	Jun 03 2013 12:00AM
Updated:	Jul 22 2013 07:43AM
Credit:	T�?V Rheinland i-sec
Vulnerable:
Not Vulnerable:

TYPO3 TEQneers SEO Enhancements Extension Cross Site Request Forgery Vulnerability

The TEQneers SEO Enhancements Extension for TYPO3 is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks are also possible.

TEQneers SEO Enhancements 5.0.0 and prior are vulnerable.

TYPO3 TEQneers SEO Enhancements Extension Cross Site Request Forgery Vulnerability

To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.

TYPO3 TEQneers SEO Enhancements Extension Cross Site Request Forgery Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

TYPO3 TEQneers SEO Enhancements Extension Cross Site Request Forgery Vulnerability

References:

• TYPO3 Homepage (TYPO3)