Description (CNA)
An open‑redirect vulnerability in GeneralUtility::sanitizeLocalUrl of TYPO3 CMS 9.0.0–9.5.54, 10.0.0–10.4.53, 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17 allows an attacker to redirect users to arbitrary external sites, enabling phishing attacks by supplying a manipulated, sanitized URL.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TYPO3 / TYPO3 CMS | affected 9.0.0 before 9.5.55; affected 10.0.0 before 10.4.54; affected 11.0.0 before 11.5.48; affected 12.0.0 before 12.4.37; affected 13.0.0 before 13.4.18 |
CWE
CWE-601
References
ADP enrichment
No English description supplied.
No references supplied.