CVE-2014-9509 in TYPO3
Summary
The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set to all or cached, allows remote attackers to have an unspecified impact (possibly resource consumption) via a "Cache Poisoning" attack using a URL with arbitrary arguments, which triggers a reload of the page.
Reservation
01/04/2015
Disclosure
01/04/2015
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 73493 | TYPO3 Cache input validation | 20 | Not defined | Not defined | CVE-2014-9509 |
| 68434 | TYPO3 Link input validation | 20 | Unproven | Official fix | CVE-2014-9509 |