CVE-2024-34358

TYPO3 is an enterprise content management system. Starting in version 9.0.0 and prior to versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS, and 13.1.1, the `ShowImageController` (`_eID tx_cms_showpic_`) lacks a cryptographic HMAC-signature on the `frame` HTTP query parameter (e.g. `/index.php?eID=tx_cms_showpic?file=3&...&frame=12345`). This allows adversaries to instruct the system to produce an arbitrary number of thumbnail images on the server side. TYPO3 versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS, 13.1.1 fix the problem described.

• CWE-200
• CWE-347
• CWE-770

• https://github.com/TYPO3/typo3/commit/05c95fed869a1a6dcca06c7077b83b6ea866ff14Patch
• https://github.com/TYPO3/typo3/commit/1e70ebf736935413b0531004839362b4fb0755a5Patch
• https://github.com/TYPO3/typo3/commit/df7909b6a1cf0f12a42994d0cc3376b607746142Patch
• https://github.com/TYPO3/typo3/security/advisories/GHSA-36g8-62qv-5957Mitigation, Vendor Advisory
• https://typo3.org/security/advisory/typo3-core-sa-2024-010Mitigation, Vendor Advisory
• https://github.com/TYPO3/typo3/commit/05c95fed869a1a6dcca06c7077b83b6ea866ff14Patch
• https://github.com/TYPO3/typo3/commit/1e70ebf736935413b0531004839362b4fb0755a5Patch
• https://github.com/TYPO3/typo3/commit/df7909b6a1cf0f12a42994d0cc3376b607746142Patch
• https://github.com/TYPO3/typo3/security/advisories/GHSA-36g8-62qv-5957Mitigation, Vendor Advisory
• https://typo3.org/security/advisory/typo3-core-sa-2024-010Mitigation, Vendor Advisory

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-343521Panel is an open source Linux server operation and maintena…7.5
• CVE-2024-34353The matrix-sdk-crypto crate, part of the Matrix Rust SDK pro…5.5
• CVE-2024-34354CMSaaSStarter is a SaaS template/boilerplate built with Svel…6.5
• CVE-2024-34355TYPO3 is an enterprise content management system. Starting i…5.4
• CVE-2024-34356TYPO3 is an enterprise content management system. Starting i…5.4
• CVE-2024-34357TYPO3 is an enterprise content management system. Starting i…5.4
• CVE-2024-34359llama-cpp-python is the Python bindings for llama.cpp. `llam…9.6
• CVE-2024-3436A vulnerability was found in SourceCodester Prison Managemen…7.2
• CVE-2024-34360go-spacemesh is a Go implementation of the Spacemesh protoco…8.2
• CVE-2024-34361Pi-hole is a DNS sinkhole that protects devices from unwante…8.8
• CVE-2024-34362Envoy is a cloud-native, open source edge and service proxy.…5.9
• CVE-2024-34363Envoy is a cloud-native, open source edge and service proxy.…7.5