CVE-2024-55892

Summary

CVE-2024-55892 is a vulnerability affecting TYPO3, a popular open-source Content Management Framework. This issue arises when the `TYPO3\\CMS\\Core\\Http\\Uri` component is used to parse externally provided URLs and validate their hosts. If such a URL is used after passing the validation checks, an attacker can exploit this vulnerability for open redirect or Server Side Request Forgery (SSRF) attacks. To mitigate this risk, it is strongly recommended that users update to TYPO3 versions 9.5.49 ELTS, 10.4.48 ELTS, 11.5.42 LTS, 12.4.25 LTS, or 13.4.3, as these releases address the described problem. No known workarounds exist for this vulnerability, making updates the most effective solution.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.