Executive brief
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
Affected products
- Packagist typo3/cms-core
- Packagist typo3/cms
Junglewise Threat Intelligence
CVE-2022-36104: TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
CVE-2022-36104 · Severity: low · CVSS 3.1 · Published 2022-09-16
Technologies: typo3/cms-core (Packagist), typo3/cms (Packagist). Vendors: Packagist.
Related threats
- The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 became ineffective in TYPO3 v13.0, where TYPO3 CMS started
- TYPO3 CMS broken access control in Form Framework form_definition table
- TYPO3 Broken Access Control in Localization Handling
- Typo3 Cross-Site Scripting in Language Pack Handling
- Typo3 Broken Access Control in Import Module