CVE-2014-9509
CVE-2014-9509
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set to all or cached, allows remote attackers to have an unspecified impact (possibly resource consumption) via a "Cache Poisoning" attack using a URL with arbitrary arguments, which triggers a reload of the page.
EPSS 1.5% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
typo3/cms Packagist
- Affected ranges
- ECOSYSTEM: ≥ 4.5.0, < 4.5.39
Update to 4.5.39
typo3/cms Packagist
- Versions
- 6.2.0
- 6.2.1
- 6.2.2
- 6.2.3
- 6.2.4
- 6.2.5
- 6.2.6
- 6.2.7
- 6.2.8
- Affected ranges
- ECOSYSTEM: ≥ 6.2.0, < 6.2.9
Update to 6.2.9
typo3/cms Packagist
- Versions
- 7.0.0
- 7.0.1
- Affected ranges
- ECOSYSTEM: ≥ 7.0.0, < 7.0.2
Update to 7.0.2
typo3/cms Packagist
- Affected ranges
- ECOSYSTEM: ≥ 4.6.0, < 4.6.19
Update to 4.6.19
typo3/cms Packagist
- Affected ranges
- ECOSYSTEM: ≥ 4.7.0, < 4.7.21
Update to 4.7.21
typo3/cms Packagist
- Affected ranges
- ECOSYSTEM: ≥ 6.0.0, < 6.0.15
Update to 6.0.15
typo3/cms Packagist
- Affected ranges
- ECOSYSTEM: ≥ 6.1.0, < 6.1.13
Update to 6.1.13