#VU40969 Link following in TYPO3 - CVE-2014-9508

Vulnerability identifier: #VU40969

Vulnerability risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2014-9508

CWE-ID: CWE-59

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
TYPO3
Web applications / CMS

Vendor: TYPO3

Description

The vulnerability allows a remote non-authenticated attacker to manipulate data.

The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set and using a homepage with links that only contain anchors, allows remote attackers to change URLs to arbitrary domains for those links via unknown vectors.

Mitigation
Install update from vendor's website.

Vulnerable software versions

TYPO3: 4.5.0 - 4.7.20, 6.0 - 6.2.8, 7.0.0 - 7.0.1

---

External links
https://lists.opensuse.org/opensuse-updates/2016-08/msg00106.html
https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-003/

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.