-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| typo3/cms-core | composer | >= 9.0.0, < 9.5.38 | 9.5.38 |
| typo3/cms-core | composer | >= 10.0.0, < 10.4.33 | 10.4.33 |
| typo3/cms-core | composer | >= 11.0.0, < 11.5.20 | 11.5.20 |
| typo3/cms-core | composer | >= 12.0.0, < 12.1.1 | 12.1.1 |
| typo3/cms | composer | >= 10.0.0, < 10.4.33 | 10.4.33 |
| typo3/cms | composer | >= 11.0.0, < 11.5.20 | 11.5.20 |
| typo3/cms | composer | >= 12.0.0, < 12.1.1 | 12.1.1 |
Miggo AIRoot Cause AnalysisThe core vulnerability stems from the SiteConfiguration::write() method not properly sanitizing YAML placeholder expressions. The commit diff shows the patch added a 'protectPlaceholders' parameter to enforce validation via YamlPlaceholderGuard. Before this fix, the method would write user-controlled placeholder expressions without checking if they were newly introduced, enabling expression language injection. The modified SiteConfigurationController.php now calls write() with protectPlaceholders=true, confirming the original method was vulnerable when this flag wasn't enforced.
PHPPHPOngoing coverage of React2Shell