CVE-2022-23504CWE-200CWE-917

TYPO3 contains Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration

Medium · published December 14, 2022

CVSS v3.1
5.7
EPSS
1%
Percentile
45.1
In the wild
Unconfirmed
What it is

TYPO3 is an open source PHP based web content management system. Versions prior to 9.5.38, 10.4.33, 11.5.20, and 12.1.1 are subject to Sensitive Information Disclosure. Due to the lack of handling user-submitted YAML placeholder expressions in the site configuration backend module, attackers could expose sensitive internal information, such as system configuration or HTTP request messages of other website visitors. A valid backend user account having administrator privileges is needed to exploit this vulnerability. This issue has been patched in versions 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00548 · 45.1th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-917 · Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
Published
2022-12-14T07:58Z
EPSS history
Timeline
  • 14 DEC 07:58Z
    TYPO3 contains Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
    cvelistv5