CVE-2022-36104

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 11.5.16

Description The issue arises when requesting invalid or non-existing resources via HTTP, triggering the page error handler to retrieve content from another page, leading to recursive application calls that amplify the initial attack's impact until the web server's limits are exceeded.

Recommendations Update to TYPO3 version 11.5.16 to resolve this issue. As a temporary workaround, consider restricting access to invalid or non-existing resources via HTTP to minimize the risk of exploitation.