Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-21359
HistoryMar 23, 2021 - 2:15 a.m.

Code injection

2021-03-2302:15:00
PRIOn knowledge base
www.prio-n.com
5

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.0%

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.25, 10.4.14, 11.1.1 requesting invalid or non-existing resources via HTTP triggers the page error handler which again could retrieve content to be shown as error message from another page. This leads to a scenario in which the application is calling itself recursively - amplifying the impact of the initial attack until the limits of the web server are exceeded. This is fixed in versions 9.5.25, 10.4.14, 11.1.1.

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.0%