CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
CVE details

CVE-2024-55892

TYPO3 is a free and open source Content Management Framework. Applications that use `TYPO3\CMS\Core\Http\Uri` to parse externally provided URLs (e.g., via a query parameter) and validate the host of the parsed URL may be vulnerable to open redirect or SSRF attacks if the URL is used after passing the validation checks. Users are advised to update to TYPO3 versions 9.5.49 ELTS, 10.4.48 ELTS, 11.5.42 LTS, 12.4.25 LTS, 13.4.3 which fix the problem described. There are no known workarounds for this vulnerability.

Score
4.8 medium
Published
2025-01-14
Links
NVD · cve.org · Report wrong data

Matched ports (5)

PortPackageVersionStatusMaintainer
www/typo3-11typo3-11-php8211.5.40_1unaddressedfreebsd-ports@charlieroot.de
www/typo3-11typo3-11-php8311.5.40_1unaddressedfreebsd-ports@charlieroot.de
www/typo3-11typo3-11-php8411.5.40_1unaddressedfreebsd-ports@charlieroot.de
www/typo3-11typo3-11-php8511.5.40_1unaddressedfreebsd-ports@charlieroot.de
www/typo3-11typo3-11-php8611.5.40_1unaddressedfreebsd-ports@charlieroot.de

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>typo3-11-php82</name>
	<range><lt>9.5.49</lt></range>
      </package>
      <package>
	<name>typo3-11-php83</name>
	<range><lt>9.5.49</lt></range>
      </package>
      <package>
	<name>typo3-11-php84</name>
	<range><lt>9.5.49</lt></range>
      </package>
      <package>
	<name>typo3-11-php85</name>
	<range><lt>9.5.49</lt></range>
      </package>
      <package>
	<name>typo3-11-php86</name>
	<range><lt>9.5.49</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>TYPO3 is a free and open source Content Management Framework.
	Applications that use `TYPO3\CMS\Core\Http\Uri` to parse externally
	provided URLs (e.g., via a query parameter) and validate the host of
	the parsed URL may be vulnerable to open redirect or SSRF attacks if
	the URL is used after passing the validation checks. Users are advised
	to update to TYPO3 versions 9.5.49 ELTS, 10.4.48 ELTS, 11.5.42 LTS,
	12.4.25 LTS, 13.4.3 which fix the problem described. There are no
	known workarounds for this vulnerability.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2024-55892</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2024-55892</url>
    </references>
    <dates>
      <discovery>2025-01-14</discovery>
      <entry>2026-10-26</entry>
    </dates>
  </vuln>