CVE-2021-21338
Last modified
CVE-2021-21338 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 it has been discovered that Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. EPSS estimates a 1.10% chance of exploitation in the next 30 days.
Description
TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 it has been discovered that Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. No authentication is required in order to exploit this vulnerability. This is fixed in versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Typo3 | Typo3 | >= 6.2.0, < 6.2.57 |
| Typo3 | Typo3 | >= 7.0.0, < 7.6.51 |
| Typo3 | Typo3 | >= 8.0.0, < 8.7.40 |
| Typo3 | Typo3 | >= 9.0.0, < 9.5.25 |
| Typo3 | Typo3 | >= 10.0.0, < 10.4.14 |
| Typo3 | Typo3 | >= 11.0.0, < 11.1.1 |
References
- https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmpThird Party Advisory
- https://packagist.org/packages/typo3/cms-coreRelease Notes, Third Party Advisory
- https://typo3.org/security/advisory/typo3-core-sa-2021-001Vendor Advisory
- https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmpThird Party Advisory
- https://packagist.org/packages/typo3/cms-coreRelease Notes, Third Party Advisory
- https://typo3.org/security/advisory/typo3-core-sa-2021-001Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-21338?
How severe is CVE-2021-21338?
How do I fix CVE-2021-21338?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-21332Synapse is a Matrix reference homeserver written in python (…8.2
- CVE-2021-21333Synapse is a Matrix reference homeserver written in python (…6.1
- CVE-2021-21334In containerd (an industry-standard container runtime) befor…6.3
- CVE-2021-21335In the SPNEGO HTTP Authentication Module for nginx (spnego-h…9.8
- CVE-2021-21336Products.PluggableAuthService is a pluggable Zope authentica…6.5
- CVE-2021-21337Products.PluggableAuthService is a pluggable Zope authentica…6.1
- CVE-2021-21339TYPO3 is an open source PHP based web content management sys…7.5
- CVE-2021-2134Vulnerability in the Enterprise Manager for Fusion Middlewar…6.5
- CVE-2021-21340TYPO3 is an open source PHP based web content management sys…5.4
- CVE-2021-21341XStream is a Java library to serialize objects to XML and ba…7.5
- CVE-2021-21342XStream is a Java library to serialize objects to XML and ba…9.1
- CVE-2021-21343XStream is a Java library to serialize objects to XML and ba…7.5
Are you affected by CVE-2021-21338?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST