CVE-2025-24856CWE-348

An issue was discovered in the oidc (aka OpenID Connect Authentication) extension before 4.0.0 for TYPO3

Medium · published March 16, 2025

CVSS v3.1
4.2
EPSS
0%
Percentile
7.4
In the wild
Unconfirmed
What it is

An issue was discovered in the oidc (aka OpenID Connect Authentication) extension before 4.0.0 for TYPO3. The account linking logic allows a pre-hijacking attack, leading to Account Takeover. The attack can only be exploited if the following requirements are met: (1) an attacker can anticipate the e-mail address of the user, (2) an attacker can register a public frontend user account using that e-mail address before the user's first OIDC login, and (3) the IDP returns an email field containing the e-mail address of the user,

The record
Technical detail
CVSS v3.1
4.2 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:F/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00182 · 7.4th percentile
Weakness
CWE-348 · Use of Less Trusted Source
Published
2025-03-16T00:00Z
EPSS history
Timeline
  • 16 MAR 00:00Z
    An issue was discovered in the oidc (aka OpenID Connect Authentication) extension before 4.0.0 for TYPO3
    cvelistv5