Typo3 · Typo3 · CVE-2024-55892
**Name of the Vulnerable Software and Affected Versions**
TYPO3 versions 9.5.48 and earlier ELTS, 10.4.47 and earlier ELTS, 11.5.41 and earlier LTS, 12.4.24 and earlier LTS, 13.4.2 and earlier
**Description**
Applications that use `TYPO3CMSCoreHttpUri` to parse externally provided URLs and validate the host of the parsed URL may be vulnerable to open redirect or SSRF attacks if the URL is used after passing the validation checks.
**Recommendations**
Update to TYPO3 version 9.5.49 ELTS
Update to TYPO3 version 10.4.48 ELTS
Update to TYPO3 version 11.5.42 LTS
Update to TYPO3 version 12.4.25 LTS
Update to TYPO3 version 13.4.3