Medium severity4.8NVD Advisory· Published Jan 14, 2025· Updated Jun 17, 2026
CVE-2024-55892
CVE-2024-55892
Description
TYPO3 is a free and open source Content Management Framework. Applications that use TYPO3\CMS\Core\Http\Uri to parse externally provided URLs (e.g., via a query parameter) and validate the host of the parsed URL may be vulnerable to open redirect or SSRF attacks if the URL is used after passing the validation checks. Users are advised to update to TYPO3 versions 9.5.49 ELTS, 10.4.48 ELTS, 11.5.42 LTS, 12.4.25 LTS, 13.4.3 which fix the problem described. There are no known workarounds for this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
typo3/cms-corePackagist | >= 9.0.0, < 9.5.49 | 9.5.49 |
typo3/cms-corePackagist | >= 10.0.0, < 10.4.48 | 10.4.48 |
typo3/cms-corePackagist | >= 11.0.0, < 11.5.42 | 11.5.42 |
typo3/cms-corePackagist | >= 12.0.0, < 12.4.25 | 12.4.25 |
typo3/cms-corePackagist | >= 13.0.0, < 13.4.3 | 13.4.3 |
Affected products
2Patches
Vulnerability mechanics
References
5- github.com/TYPO3/typo3/security/advisories/GHSA-2fx5-pggv-6jjrnvdVendor AdvisoryWEB
- github.com/advisories/GHSA-2fx5-pggv-6jjrghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-55892ghsaADVISORY
- typo3.org/security/advisory/typo3-core-sa-2025-002nvdVendor AdvisoryWEB
- github.com/TYPO3/typo3/commit/a4abf48d254685f43383e6e7f80d48aebaea56afghsaWEB
News mentions
0No linked articles in our index yet.