The escapeStrForLike method in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x…
Priority LOW 23CWE-200Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- Partial · None · None
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and GitHub. Impact type from CWE-200.
Summary
The escapeStrForLike method in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly escape input when the MySQL database is set to sql_mode NO_BACKSLASH_ESCAPES, which allows remote attackers to obtain sensitive information via wildcard characters in a LIKE query.
Why it matters now
EPSS 0.01648 76th percentileScored 2026-11-07
Fix Fixed typo3/cms-core (Packagist): 4.2.16, 4.3.9, 4.4.5
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | typo3/cms-core (Packagist) | 4.2.0 to before 4.2.16 | 4.2.16 | Patch available | GHSA-xgc2-q928-27wv |
| — | typo3/cms-core (Packagist) | 4.3.0 to before 4.3.9 | 4.3.9 | Patch available | GHSA-xgc2-q928-27wv |
| — | typo3/cms-core (Packagist) | 4.4.0 to before 4.4.5 | 4.4.5 | Patch available | GHSA-xgc2-q928-27wv |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- typo3/cms-core (Packagist) Vendor— Affected 4.2.0 to before 4.2.16 Fixed in 4.2.16 Patch available GHSA-xgc2-q928-27wv
- typo3/cms-core (Packagist) Vendor— Affected 4.3.0 to before 4.3.9 Fixed in 4.3.9 Patch available GHSA-xgc2-q928-27wv
- typo3/cms-core (Packagist) Vendor— Affected 4.4.0 to before 4.4.5 Fixed in 4.4.5 Patch available GHSA-xgc2-q928-27wv
CPE configurations NVD · 29
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:* | 4.2.0 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:* | 4.2.1 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:* | 4.2.2 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:* | 4.2.3 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:* | 4.2.4 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:* | 4.2.5 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:* | 4.2.6 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:* | 4.2.7 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:* | 4.2.8 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:* | 4.2.9 | Vulnerable | TYPO3 |
- cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:* Versions 4.2.0 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:* Versions 4.2.1 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:* Versions 4.2.2 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:* Versions 4.2.3 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:* Versions 4.2.4 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:* Versions 4.2.5 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:* Versions 4.2.6 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:* Versions 4.2.7 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:* Versions 4.2.8 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:* Versions 4.2.9 Vulnerable ·TYPO3
Show 19 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:typo3:typo3:4.2.10:*:*:*:*:*:*:* | 4.2.10 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.2.11:*:*:*:*:*:*:* | 4.2.11 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.2.12:*:*:*:*:*:*:* | 4.2.12 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.2.13:*:*:*:*:*:*:* | 4.2.13 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.2.14:*:*:*:*:*:*:* | 4.2.14 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.2.15:*:*:*:*:*:*:* | 4.2.15 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.3.0:*:*:*:*:*:*:* | 4.3.0 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.3.1:*:*:*:*:*:*:* | 4.3.1 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.3.2:*:*:*:*:*:*:* | 4.3.2 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.3.3:*:*:*:*:*:*:* | 4.3.3 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.3.4:*:*:*:*:*:*:* | 4.3.4 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.3.5:*:*:*:*:*:*:* | 4.3.5 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.3.6:*:*:*:*:*:*:* | 4.3.6 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.3.7:*:*:*:*:*:*:* | 4.3.7 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.3.8:*:*:*:*:*:*:* | 4.3.8 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.4.1:*:*:*:*:*:*:* | 4.4.1 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.4.2:*:*:*:*:*:*:* | 4.4.2 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.4.3:*:*:*:*:*:*:* | 4.4.3 | Vulnerable | TYPO3 |
| cpe:2.3:a:typo3:typo3:4.4.4:*:*:*:*:*:*:* | 4.4.4 | Vulnerable | TYPO3 |
- cpe:2.3:a:typo3:typo3:4.2.10:*:*:*:*:*:*:* Versions 4.2.10 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.2.11:*:*:*:*:*:*:* Versions 4.2.11 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.2.12:*:*:*:*:*:*:* Versions 4.2.12 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.2.13:*:*:*:*:*:*:* Versions 4.2.13 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.2.14:*:*:*:*:*:*:* Versions 4.2.14 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.2.15:*:*:*:*:*:*:* Versions 4.2.15 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.3.0:*:*:*:*:*:*:* Versions 4.3.0 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.3.1:*:*:*:*:*:*:* Versions 4.3.1 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.3.2:*:*:*:*:*:*:* Versions 4.3.2 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.3.3:*:*:*:*:*:*:* Versions 4.3.3 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.3.4:*:*:*:*:*:*:* Versions 4.3.4 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.3.5:*:*:*:*:*:*:* Versions 4.3.5 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.3.6:*:*:*:*:*:*:* Versions 4.3.6 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.3.7:*:*:*:*:*:*:* Versions 4.3.7 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.3.8:*:*:*:*:*:*:* Versions 4.3.8 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.4.1:*:*:*:*:*:*:* Versions 4.4.1 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.4.2:*:*:*:*:*:*:* Versions 4.4.2 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.4.3:*:*:*:*:*:*:* Versions 4.4.3 Vulnerable ·TYPO3
- cpe:2.3:a:typo3:typo3:4.4.4:*:*:*:*:*:*:* Versions 4.4.4 Vulnerable ·TYPO3
Remediation
- Fix · GHSA-xgc2-q928-27wv typo3/cms-core (Packagist) Fixed in 4.2.16 Advisory →
- Fix · GHSA-xgc2-q928-27wv typo3/cms-core (Packagist) Fixed in 4.3.9 Advisory →
- Fix · GHSA-xgc2-q928-27wv typo3/cms-core (Packagist) Fixed in 4.4.5 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2010-5104
- 2026-10-03 Alias added: GHSA-xgc2-q928-27wv
References
Advisory 2
Other 13
- [oss-security] 20120512 Re: CVE-request: TYPO3 TYPO3-SA-2010-022 still without CVE
- [oss-security] 20110113 CVE requests: ftpls, xdigger, lbreakout2, calibre, typo3
- 70116
- [oss-security] 20120510 Re: CVE-request: TYPO3 TYPO3-SA-2010-022 still without CVE
- [oss-security] 20120511 CVE-request: TYPO3 TYPO3-SA-2010-022 still without CVE
- https://github.com/TYPO3/typo3/commit/9eb4be4ccf10e6959699b9cce375d48697f06cba
- https://github.com/TYPO3/typo3/commit/e8c32474a5571336681243465f42090cf056054f
- https://github.com/TYPO3/typo3/commit/fcabd2fc2aa557c94805f7505277185c4abb68ab
- https://github.com/TYPO3-CMS/core
- https://web.archive.org/web/20101219052359/http://secunia.com/advisories/35770
- https://web.archive.org/web/20111025222220/http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-022
- https://web.archive.org/web/20111223211753/http://www.securityfocus.com/bid/45470
- http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022
More Typo3 vulnerabilities
- TI-2023-10314 Persisted Cross-Site Scripting in Frontend Rendering in typo3 CVSS 3.1HIGH 8.8
- TI-2010-03538 The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3… CVSS 2.0HIGH 7.1
- TI-2009-00775 The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before… CVSS 2.0MEDIUM 5.0
- TI-2009-00241 The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9… CVSS 2.0HIGH 10.0
- TI-2020-08940 Improperly Controlled Modification of Dynamically-Determined Object Attributes in TYPO3 CMS CVSS 3.1CRITICAL 10.0
- TI-2011-03994 Improper authentication in TYPO3 CVSS 3.1CRITICAL 9.8
Sources
- CVE-2010-5104 · CVE Program
- CVE-2010-5104 · NVD
- FIRST EPSS
- GHSA-xgc2-q928-27wv · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences