CVE-2010-3714Typo3 Vulnerability
TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism
Published May 17, 2022 · Updated Mar 9, 2026 · Also known as DEBIAN-CVE-2010-3714, DEBIAN-CVE-2010-3715, DEBIAN-CVE-2010-3716, DEBIAN-CVE-2010-3717, DEBIAN-CVE-2010-4068, DSA-2121-1, GHSA-w736-qv86-vq94
Key Facts
Patch immediately- CVE-2010-3714 is a high-severity vulnerability (CVSS 7.1 v2) affecting Typo3, typo3/cms (composer), typo3-src (debian).
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 24% probability of exploitation in the next 30 days.
- Fixed versions are available, including typo3-src 4.2.5-1+lenny6, typo3/cms 4.2.15, typo3/cms 4.3.7.
- Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Scores
CVSS v2
7.1
AV:N/AC:M/Au:N/C:C/I:N/A:N
EPSS (30-day exploit likelihood)
24%
Higher than 97.8% of all scored CVEs
Exploit maturity
Proof of concept
ATLAS score
39/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Proof of concept
Public exploit code
1
Proof-of-concept links
In-the-wild evidence
0
Reports of active use
Advisories And Exploit References
- advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2010-3714
- advisoryhttp://blog.nibblesec.org/2010/12/typo3-sa-2010-020-typo3-sa-2010-022.html
- advisoryGHSA advisory
- advisoryhttps://github.com/TYPO3/typo3/commit/687b671c765eac10ffb764547bb403ac3ef55620
- advisoryhttps://github.com/TYPO3/typo3/commit/a8ccd387cafd2c2c338fc29109c16418f7657229
- advisoryhttps://github.com/TYPO3/typo3/commit/d95f06f633fd2c289b544f6d5907b789eae6cccb
Description
The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers to read arbitrary files via unspecified vectors.
Affected Products
28 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| Typo3Typo3 | 4.2.0, 4.2.1, 4.2.10, 4.2.11, 4.2.12, 4.2.13, 4.2.14, 4.2.2 | n/a |
| typo3/cmscomposer | >= 4.4.0 | 4.4.4 |
| typo3-srcdebian | See advisory | 4.2.5-1+lenny6 |
Patched Releases
typo3-src
4.2.5-1+lenny6
typo3/cms
4.2.15, 4.3.7, 4.4.4
Timeline
Publicly disclosed
May 17, 2022
Last updated
Mar 9, 2026
Weakness Type
- CWE-264
- CWE-284 Improper Access Control
References
- advisorynvd.nist.gov · CVE-2010-3714
- advisoryblog.nibblesec.org · typo3-sa-2010-020-typo3-sa-2010-022.html
- advisoryGHSA advisory
- advisorygithub.com · 687b671
- advisorygithub.com · a8ccd38
FAQ
Common Questions.
The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers to read arbitrary files via unspecified vectors.
Affected: Typo3 versions 4.2.0, 4.2.1, 4.2.10, 4.2.11, 4.2.12, 4.2.13, 4.2.14, 4.2.2; typo3/cms (composer) versions >= 4.4.0; typo3-src (debian). The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including typo3-src 4.2.5-1+lenny6, typo3/cms 4.2.15, typo3/cms 4.3.7.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Is CVE-2010-3714 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo