CVE-2014-9508
CVE-2014-9508
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set and using a homepage with links that only contain anchors, allows remote attackers to change URLs to arbitrary domains for those links via unknown vectors.
EPSS 1.7% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
typo3/cms Packagist
- Affected ranges
- ECOSYSTEM: ≥ 4.5.0, < 4.5.39
Update to 4.5.39
typo3/cms Packagist
- Versions
- 6.2.0
- 6.2.1
- 6.2.2
- 6.2.3
- 6.2.4
- 6.2.5
- 6.2.6
- 6.2.7
- 6.2.8
- Affected ranges
- ECOSYSTEM: ≥ 4.6.0, < 6.2.9
Update to 6.2.9
typo3/cms Packagist
- Versions
- 7.0.0
- 7.0.1
- Affected ranges
- ECOSYSTEM: ≥ 7.0.0, < 7.0.2
Update to 7.0.2