CVE-2009-0815

TYPO3 < 4.0.12/4.1.10/4.2.6 - 'jumpUrl' Remote File Disclosure

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret (juHash) in an error message, which allows remote attackers to read arbitrary files by including the hash in a request.

El mecanismo jumpUrl en la biblioteca class.tslib_fe.php en TYPO3 versión 3.3.x hasta 3.8.x, versión 4.0 anterior a 4.0.12, versión 4.1 anterior a 4.1.10, versión 4.2 anterior a 4.2.6 y versión 4.3alpha1, filtra un hash secreto (juHash) en un mensaje de error, que permite a los atacantes remotos leer archivos arbitrarios mediante la inclusión del hash en una petición.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2009-02-10 First Exploit
2009-03-04 CVE Reserved
2009-03-05 CVE Published
2024-08-07 CVE Updated
2024-09-13 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CAPEC

References (6)

URL	Tag	Source
http://www.openwall.com/lists/oss-security/2009/02/10/6	Mailing List
http://www.securitytracker.com/id?1021710	Vdb Entry
http://web.archive.org/web/20090212165636/http://secunia.com:80/advisories/33829

URL	Date	SRC
https://www.exploit-db.com/exploits/8038	2009-02-10

URL	Date	SRC
http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002	2009-02-10
http://www.debian.org/security/2009/dsa-1720	2010-04-27

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				3.3.x Search vendor "Typo3" for product "Typo3" and version "3.3.x"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				3.5.x Search vendor "Typo3" for product "Typo3" and version "3.5.x"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				3.6.x Search vendor "Typo3" for product "Typo3" and version "3.6.x"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				3.7.x Search vendor "Typo3" for product "Typo3" and version "3.7.x"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				3.8.x Search vendor "Typo3" for product "Typo3" and version "3.8.x"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.0 Search vendor "Typo3" for product "Typo3" and version "4.0"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.1 Search vendor "Typo3" for product "Typo3" and version "4.1"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.1.0 Search vendor "Typo3" for product "Typo3" and version "4.1.0"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.1.2 Search vendor "Typo3" for product "Typo3" and version "4.1.2"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.1.3 Search vendor "Typo3" for product "Typo3" and version "4.1.3"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.1.4 Search vendor "Typo3" for product "Typo3" and version "4.1.4"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.1.5 Search vendor "Typo3" for product "Typo3" and version "4.1.5"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.1.6 Search vendor "Typo3" for product "Typo3" and version "4.1.6"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.1.7 Search vendor "Typo3" for product "Typo3" and version "4.1.7"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.1.8 Search vendor "Typo3" for product "Typo3" and version "4.1.8"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.1.9 Search vendor "Typo3" for product "Typo3" and version "4.1.9"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.2 Search vendor "Typo3" for product "Typo3" and version "4.2"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.2.0 Search vendor "Typo3" for product "Typo3" and version "4.2.0"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.2.1 Search vendor "Typo3" for product "Typo3" and version "4.2.1"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.2.2 Search vendor "Typo3" for product "Typo3" and version "4.2.2"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.2.3 Search vendor "Typo3" for product "Typo3" and version "4.2.3"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.2.4 Search vendor "Typo3" for product "Typo3" and version "4.2.4"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.2.5 Search vendor "Typo3" for product "Typo3" and version "4.2.5"		-		Affected
Typo3 Search vendor "Typo3"		Typo3 Search vendor "Typo3" for product "Typo3"				4.3 Search vendor "Typo3" for product "Typo3" and version "4.3"		alpha1		Affected