GitHub Advisory DatabaseGHSA-7GXQ-5QQC-V3FCTYPO3 Open redirect vulnerability in the Access tracking mechanism
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS
Percentile
76.5%
Open redirect vulnerability in the Access tracking mechanism in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected configurations
References
lists.opensuse.org/opensuse-updates/2013-03/msg00079.html
secunia.com/advisories/52433
secunia.com/advisories/52638
typo3.org/support/teamssecuritysecurity-bulletins/security-bulletins-single-view/article/sql-injection-and-open-redirection-in-typo3-core/
www.debian.org/security/2013/dsa-2646
www.openwall.com/lists/oss-security/2013/03/12/3
www.osvdb.org/90924
www.securityfocus.com/bid/58330
github.com/advisories/GHSA-7gxq-5qqc-v3fc
nvd.nist.gov/vuln/detail/CVE-2013-1843
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS
Percentile
76.5%