CVE-2014-9508

https://notcve.org/view.php?id=CVE-2014-9508

04 Jan 2015 — The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set and using a homepage with links that only contain anchors, allows remote attackers to change URLs to arbitrary domains for those links via unknown vectors. El componente frontend rendering en TYPO3 4.5.x anterior a 4.5.39, 4.6.x hasta 6.2.x anterior a 6.2.9, y 7.x anterior a 7.0.2, cuando config.prefixLocalAnchors está configurado y utiliza una página w... • http://lists.opensuse.org/opensuse-updates/2016-08/msg00106.html • CWE-59: Improper Link Resolution Before File Access ('Link Following') •