VULNERABILITY INTELLIGENCE

CVE-2014-9508

CVSS score4.3 MEDIUM
EPSS probability1.72%
CISA KEVNot currently listed
Published2015-01-04
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set and using a homepage with links that only contain anchors, allows remote attackers to change URLs to arbitrary domains for those links via unknown vectors.

Weakness classification

  • CWE-59: Improper Link Resolution Before File Access ('Link Following')

Primary references