Read the docs
TI-2024-38916 Aliases GHSA-g585-crjf-vhwq

TYPO3 Denial of Service in Frontend Record Registration

Priority LOW 38CWE-770Published · Updated

Key facts

Attack vector
—
Privileges required
—
User interaction
—
Attack complexity
—
Impact type
Denial of service
Confidentiality · integrity · availability
—
Fix status
Fixed

No CVSS vector from any source. Fix status from GitHub. Impact type from CWE-770.

Summary

TYPO3’s built-in record registration functionality (aka `basic shopping cart`) using recs URL parameters is vulnerable to denial of service. Failing to properly ensure that anonymous user sessions are valid, attackers can use this vulnerability in order to create an arbitrary amount of individual session-data records in the database.

Why it matters now

Fix Fixed typo3/cms (Packagist): 7.6.32, 8.7.21

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—typo3/cms (Packagist)7.0.0 to before 7.6.327.6.32Patch availableGHSA-g585-crjf-vhwq
—typo3/cms (Packagist)8.0.0 to before 8.7.218.7.21Patch availableGHSA-g585-crjf-vhwq
  • typo3/cms (Packagist) Vendor— Affected 7.0.0 to before 7.6.32 Fixed in 7.6.32 Patch available GHSA-g585-crjf-vhwq
  • typo3/cms (Packagist) Vendor— Affected 8.0.0 to before 8.7.21 Fixed in 8.7.21 Patch available GHSA-g585-crjf-vhwq

Remediation

  • Fix · GHSA-g585-crjf-vhwq typo3/cms (Packagist) Fixed in 7.6.32 Advisory →
  • Fix · GHSA-g585-crjf-vhwq typo3/cms (Packagist) Fixed in 8.7.21 Advisory →

Timeline

  1. 2026-10-03 Threatist record created from GHSA-g585-crjf-vhwq

References

Other 5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences