// For flags

CVE-2021-41114

HTTP Host Header Injection in Request Handling in Typo3

Severity Score

5.3
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that TYPO3 CMS is susceptible to host spoofing due to improper validation of the HTTP Host header. TYPO3 uses the HTTP Host header, for example, to generate absolute URLs during the frontend rendering process. Since the host header itself is provided by the client, it can be forged to any value, even in a name-based virtual hosts environment. This vulnerability is the same as described in TYPO3-CORE-SA-2014-001 (CVE-2014-3941). A regression, introduced during TYPO3 v11 development, led to this situation. The already existing setting $GLOBALS['TYPO3_CONF_VARS']['SYS']['trustedHostsPattern'] (used as an effective mitigation strategy in previous TYPO3 versions) was not evaluated anymore, and reintroduced the vulnerability.

TYPO3 es un sistema de administración de contenidos web de código abierto basado en PHP y publicado bajo la licencia GNU GPL. Se ha detectado que el CMS TYPO3 es susceptible a la suplantación de host debido a una comprobación inapropiada del encabezado HTTP Host. TYPO3 usa el encabezado HTTP Host, por ejemplo, para generar URLs absolutas durante el proceso de renderización del frontend. Dado que el propio encabezado de host es proporcionado por el cliente, puede ser falsificado a cualquier valor, incluso en un entorno de hosts virtuales basados en nombres. Esta vulnerabilidad es la misma que se describe en TYPO3-CORE-SA-2014-001 (CVE-2014-3941). Una regresión, introducida durante el desarrollo de TYPO3 v11, conllevó a esta situación. El ajuste ya presente $GLOBALS["TYPO3_CONF_VARS"]["SYS"]["trustedHostsPattern"] (usado como una estrategia de mitigación eficaz en las versiones anteriores de TYPO3) ya no es evaluado, y reintrodujo la vulnerabilidad

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
Low
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-09-15 CVE Reserved
  • 2021-10-05 CVE Published
  • 2024-06-20 EPSS Updated
  • 2024-08-04 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-20: Improper Input Validation
  • CWE-644: Improper Neutralization of HTTP Headers for Scripting Syntax
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Typo3
Search vendor "Typo3"
 Typo3
Search vendor "Typo3" for product "Typo3"
 >= 11.0.0 < 11.5.0
Search vendor "Typo3" for product "Typo3" and version " >= 11.0.0 < 11.5.0"
-
Affected