GHSA-xrcq-533q-8rxw
TYPO3 Bookmark Toolbar vulnerable to denial of service
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | typo3/cms-backend | >= 11.0.0, < 12.4.37 | 12.4.37 |
| Packagist | typo3/cms-backend | >= 12.0.0, < 12.4.37 | 12.4.37 |
| Packagist | typo3/cms-backend | >= 13.0.0, < 13.4.18 | 13.4.18 |
Details
As written in the advisory (Markdown source, shown as plain text).
An uncaught exception in the Bookmark Toolbar of TYPO3 CMS versions 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17 lets administrator‑level backend users trigger a denial‑of‑service condition in the backend user interface by saving manipulated data in the bookmark toolbar.
References
External links from the advisory. They lead to third-party sites.