GHSA-rv8r-8mh5-5376: TYPO3 Information Disclosure in Backend User Interface

May 30, 2024

The element information component used to display properties of a certain record is susceptible to information disclosure. The list of references from or to the record is not properly checked for the backend user’s permissions. A valid backend user account is needed in order to exploit this vulnerability.

References

github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-06-25-1.yaml
github.com/TYPO3-CMS/core
github.com/advisories/GHSA-rv8r-8mh5-5376
typo3.org/security/advisory/typo3-core-sa-2019-014

Code Behaviors & Features

Detect and mitigate GHSA-rv8r-8mh5-5376 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →