CSRF token exposure in TYPO3 extension
The advisory, in context
When using the CsrfTokenViewHelper the extension discloses the user's session identifier to HTML output without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - like for instance Cross Site Scripting in the frontend output.
Affected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
Earlier releases before 2.1.1
Fixed in 2.1.1
27 explicitly affected versions
v1.3.3, v1.4.0, v1.4.1, v1.5.0, v1.5.1, v1.5.10, v1.5.2, v1.5.3, v1.5.4, v1.5.5, v1.5.6, v1.5.7, v1.6.0, v1.6.1, v1.6.2, v1.6.3, v1.7.0, v1.8.0, v1.8.1, v1.8.2, v1.8.3, v1.8.4, v1.8.5, v1.8.6, v1.8.7, v2.0.0, v2.1.0
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.1.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"v1.3.3",
"v1.4.0",
"v1.4.1",
"v1.5.0",
"v1.5.1",
"v1.5.10",
"v1.5.2",
"v1.5.3",
"v1.5.4",
"v1.5.5",
"v1.5.6",
"v1.5.7",
"v1.6.0",
"v1.6.1",
"v1.6.2",
"v1.6.3",
"v1.7.0",
"v1.8.0",
"v1.8.1",
"v1.8.2",
"v1.8.3",
"v1.8.4",
"v1.8.5",
"v1.8.6",
"v1.8.7",
"v2.0.0",
"v2.1.0"
]
}