{"vulnerability": "CVE-2020-11069", "sightings": [{"uuid": "7cf2deb2-d76e-45cb-befa-03a47aafabb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-11069", "type": "seen", "source": "https://t.me/cibsecurity/30001", "content": "\u203c CVE-2021-41113 \u203c\n\nTYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the new TYPO3 v11 feature that allows users to create and share deep links in the backend user interface is vulnerable to cross-site-request-forgery. The impact is the same as described in TYPO3-CORE-SA-2020-006 (CVE-2020-11069). However, it is not limited to the same site context and does not require the attacker to be authenticated. In a worst case scenario, the attacker could create a new admin user account to compromise the system. To successfully carry out an attack, an attacker must trick his victim to access a compromised system. The victim must have an active session in the TYPO3 backend at that time. The following Same-Site cookie settings in $GLOBALS[TYPO3_CONF_VARS][BE][cookieSameSite] are required for an attack to be successful: SameSite=strict: malicious evil.example.org invoking TYPO3 application at good.example.org and SameSite=lax or none: malicious evil.com invoking TYPO3 application at example.org. Update your instance to TYPO3 version 11.5.0 which addresses the problem described.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-05T22:30:48.000000Z"}, {"uuid": "7e72553b-a4bc-471d-b64b-c468b467ab9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-11069", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mss5iicgit2u", "content": "\ud83d\udea8 EUVD-2026-55971\n\ud83d\udcca 7.3/10\n\ud83c\udfe2 TYPO3\n\n\ud83d\udcdd The referrer enforcement introduced with  TYPO3-CORE-SA-2020-006 https://news.typo3.com/security/advisory/typo3-core-sa-2020-006  ( CVE-2020-11069 https://w...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-55971\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-08-11T08:00:24.284761Z"}, {"uuid": "774d1d3c-3035-4073-ad12-cdd651ba3f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-11069", "type": "seen", "source": "https://gist.github.com/alon710/e2dde3eec102d6a754efa55af1c4fe47", "content": "# CVE-2026-19418: CVE-2026-19418: Broken Access Control and Cross-Site Request Forgery in TYPO3 CMS Core\n\n> **CVSS Score:** 7.3\n> **Published:** 2026-09-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-19418\n\n## Summary\nCVE-2026-19418 is a high-severity origin validation vulnerability in TYPO3 CMS that enables Cross-Site Request Forgery (CSRF) and access control bypasses. Due to architectural consolidation of entry points in version 13.0, the core ReferrerEnforcer fails to isolate backend endpoints from the frontend, allowing an attacker with frontend script execution capabilities to perform unauthorized administrative actions.\n\n## TL;DR\nArchitectural unification of TYPO3 entry points broke the referrer-based isolation boundary, allowing frontend scripts (such as those injected via XSS) to make unauthorized administrative requests on behalf of active backend users.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-346, CWE-352\n- **Attack Vector**: Network (requires administrative user session & client-side script execution)\n- **CVSS Score**: 7.3 (High)\n- **EPSS Score**: 0.00213 (Percentile: 11.47%)\n- **Impact**: Full Administrative Compromise / Unauthorized Configuration Changes\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- TYPO3 CMS Backend and Admin/Install Tool (ext:backend, ext:install)\n- **TYPO3 CMS**: >= 13.0.0, < 13.4.34 (Fixed in: `13.4.34 LTS`)\n- **TYPO3 CMS**: >= 14.0.0, < 14.3.6 (Fixed in: `14.3.6 LTS`)\n\n## Mitigation\n\n- Upgrade TYPO3 CMS to fixed versions (13.4.34 LTS / 14.3.6 LTS) immediately.\n- Deploy a strict Content Security Policy (CSP) on the frontend to mitigate XSS risks.\n- Implement WAF rules to validate and restrict administrative route access based on Referer path prefixes.\n\n**Remediation Steps:**\n1. Verify the current running version of TYPO3 CMS via the Backend or command line interface.\n2. Run 'composer update typo3/cms-core' or equivalent update commands to pull down the patch.\n3. Verify that the TYPO3 Core packages are updated to at least 13.4.34 or 14.3.6.\n4. Clear all system caches to ensure the new classes are fully loaded.\n\n## References\n\n- [TYPO3-CORE-SA-2026-021](https://typo3.org/security/advisory/typo3-core-sa-2026-021)\n- [Related Advisory TYPO3-CORE-SA-2020-006 (CVE-2020-11069)](https://typo3.org/security/advisory/typo3-core-sa-2020-006)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-19418) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-01T23:32:21.500922Z"}, {"uuid": "fe4e46aa-0ad6-49b0-b3de-9e8972abe237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-11069", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3muiqxbxwdv2r", "content": "TYPO3 has a high-severity access control break in the backend and Install Tool, CVE-2026-19418. The referrer check added for CVE-2020-11069 stopped being effective in v13.0, when the backend moved out of the typo3/ directory to the site's main entry script. #dev", "creation_timestamp": "2026-09-02T01:12:28.228762Z"}]}